CVE-2006-5566
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 2.2%
from disclosure to weapon0 days
Published on NVDOct 27
1st PoCOct 23
exploitation probability
2.2%top 19% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
CRLF injection vulnerability in premium/index.php in Shop-Script allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the (1) links_exchange, (2) news, (3) search_with_change_category_ability, (4) logging, (5) feedback, (6) show_price, (7) register, (8) answer, (9) productID, and (10) inside parameters.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/28845⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.