Drupal CRLF injection vulnerability in the drupal_set_header function

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2016-3166 · ADVISORY
• FriendsOfPHP/security-advisories · WEB
• FriendsOfPHP/security-advisories · WEB
• drupal/core · PACKAGE
• drupal.org/SA-CORE-2016-001 · WEB
• debian.org/security/2016/dsa-3498 · WEB
• openwall.com/lists/oss-security/2016/02/24/19 · WEB
• openwall.com/lists/oss-security/2016/03/15/10 · WEB

Lỗ hổng khác của drupal/core

• CVE-2026-108515Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site S…
• CVE-2026-108514Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site S…
• CVE-2026-108097Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Drupal core allows Reflection Inj…
• DRUPAL-CORE-2026-013The Drupal project uses the [CKEditor](https://github.com/ckeditor/ckeditor5) library for WYSIWYG editing. CKEditor has released [a security…
• CVE-2026-55805TRUNG BÌNH 5.4Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Stored XSS. …