https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:29:48 +0000 https://cve.radiocsirt.org/vuln/cve-2006-3016 <p>Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors, related to &#34;certain characters in session names,&#34; including special characters that are frequently associated with CRLF injection, SQL injection, cross-site scripting (XSS), and HTTP response splitting vulnerabilities. NOTE: while the nature of the vulnerability is unspecified, it is likely that this is related to a violation of an expectation by PHP applications that the session name is alphanumeric, as implied in the PHP manual for session_name().</p> <p>Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors, related to &#34;certain characters in session names,&#34; including special characters that are frequently associated with CRLF injection, SQL injection, cross-site scripting (XSS), and HTTP response splitting vulnerabilities. NOTE: while the nature of the vulnerability is unspecified, it is likely that this is related to a violation of an expectation by PHP applications that the session name is alphanumeric, as implied in the PHP manual for session_name().</p> https://cve.radiocsirt.org/vuln/cve-2006-3016