Mobile Mp3 Search Script 2.0 - 'dl.php' HTTP Response Splitting
Author: Corrado Liotta
type: webapps
platform: php
port:
date_added: 2012-02-23
date_updated: 2015-05-01
verified: 1
codes: OSVDB-79616
tags:
aliases:
screenshot_url:
application_url:
source: https://www.securityfocus.com/bid/52136/info
Mobile Mp3 Search Script is prone to an HTTP-response-splitting vulnerability because it fails to sufficiently sanitize user-supplied data.
Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that try to entice client users into a false sense of trust.
Mobile Mp3 Search Script 2.0 is vulnerable; other versions may also be affected
http://www.example.com/dl.php?url=http://www.google.it