CRLF injection vulnerability in search.php in Phorum 5.0.14a allows remote attackers to perform HTTP Response Splitting attacks via the body parameter, which is included in the resulting Location header.
| Software | From | Fixed in |
|---|---|---|
| phorum / phorum | 5.0.14a | 5.0.14a.x |