CVE-2005-3982

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-12-04 · updated 2026-06-16

Description

CRLF injection vulnerability in layers_toggle.php in WebCalendar 1.0.1 might allow remote attackers to modify HTTP headers and conduct HTTP response splitting attacks via the ret parameter, which is used to redirect URL requests.

Affected products

Webcalendar: 1.0.1

References

http://secunia.com/advisories/17848
http://secunia.com/advisories/19240
http://vd.lwang.org/webcalendar_multiple_vulns.txt
http://www.debian.org/security/2006/dsa-1002
http://www.osvdb.org/21383
http://www.securityfocus.com/archive/1/418286/100/0/threaded
http://www.securityfocus.com/bid/15673
http://www.vupen.com/english/advisories/2005/2702
http://secunia.com/advisories/17848
http://secunia.com/advisories/19240
http://vd.lwang.org/webcalendar_multiple_vulns.txt
http://www.debian.org/security/2006/dsa-1002

Get alerted when CVE-2005-3982 or the next vulnerability affects your stack