CVE-2005-4712

no score yetEPSS 1.1%

php handicapper php handicapper: no CVSS score yet. EPSS 1.1% chance of exploitation in the next 30 days.

CRLF injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the login parameter. NOTE: the vendor has disputed CVE-2005-3497, and it is possible that the dispute was intended to include this issue as well.

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
Published: 2005-12-31
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

php_handicapper:php_handicapper

References

http://www.zone-h.org/advisories/read/id=8360
http://www.zone-h.org/advisories/read/id=8360

Check your stack JSON