HTTP Response Splitting vulnerability in the Surveys module in PHP-Nuke 7.6 allows remote attackers to spoof web content and poison web caches via hex-encoded CRLF ("%0d%0a") sequences in the forwarder parameter.
| Software | From | Fixed in |
|---|---|---|
| francisco_burzi / php-nuke | - | 7.5.x |
| francisco_burzi / php-nuke | 7.6 | 7.6.x |