CVE-2013-1647
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2013-1647
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple CRLF injection vulnerabilities in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted parameter, as demonstrated by (1) the location parameter to ajax/redirect or (2) multiple infostore URIs.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Open-Xchange Server 多个CRLF注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Open-Xchange Server是美国Open-Xchange公司的一个半开源项目。该项目主要用于开发协同软件，例如电子邮件、日历等。 Open-Xchange Server 6.22.1-rev13及之前的版本中存在多个CRLF注入漏洞。远程攻击者可借助特制的参数（如向ajax/redirect链接传递‘location’参数），利用这些漏洞注入任意HTTP头并进行HTTP响应拆分攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2013-1647
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2013-1647
Please Login to view more intelligence information
Same Patch Batch · n/a · 2013-09-05 · 17 CVEs total
| CVE-2013-1645 | Open-Xchange Server 目录遍历漏洞 | |
| CVE-2013-1646 | Open-Xchange Server 多个跨站脚本漏洞 | |
| CVE-2013-1648 | Open-Xchange Server 安全绕过漏洞 | |
| CVE-2013-1649 | Open-Xchange Server 不安全密码哈希算法漏洞 | |
| CVE-2013-1650 | Open-Xchange Server ‘/opt/open-xchange/etc’不安全文件权限漏洞 | |
| CVE-2013-1651 | Open-Xchange Server SSL证书验证安全绕过漏洞 | |
| CVE-2013-2582 | Open-Xchange AppSuite和Server CRLF注入漏洞 | |
| CVE-2013-2583 | Open-Xchange Server/OX App Suite 多个HTML注入漏洞 | |
| CVE-2013-3106 | Open-Xchange Server和OX App Suite 多个跨站脚本漏洞 | |
| CVE-2013-3276 | EMC RSA Archer GRC 访问安全绕过漏洞 | |
| CVE-2013-3277 | EMC RSA Archer GRC 开放重定向漏洞 | |
| CVE-2013-4790 | Open-Xchange AppSuite Discovered Settings 信息泄露漏洞 | |
| CVE-2013-5035 | Open-Xchange Server HtmlCleaner 竞争条件漏洞 | |
| CVE-2013-5698 | Open-Xchange AppSuite和Server 跨站脚本漏洞 | |
| CVE-2013-3479 | WordPress ShareThis插件跨站请求伪造漏洞 | |
| CVE-2013-5471 | Cisco Global Site Selector 跨站请求伪造漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8252
Open5GS SMF smf_nsmf_handle_create_data_in_hsmf null pointer - CVE-2026-8251
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qo - CVE-2026-8250
Open5GS SMF n4-build.c smf_n4_build_qos_flow_to_modify_list - CVE-2026-8249
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qo - CVE-2026-8248
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qo
V. Comments for CVE-2013-1647
No comments yet