CRLF injection vulnerability in index.php in ExpressionEngine 1.2.1 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the URL parameter.
| Software | From | Fixed in |
|---|---|---|
| expressionengine / expressionengine | - | 1.2.1.x |