CVE-2011-4203

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

CRLF injection vulnerability in calendar/set.php in the Calendar component in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, 2.1.x before 2.1.3, and 2.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors involving the url variable.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Weakness enumeration

CWE-94

Affected software

No affected versions have been published.

Timeline

Published
Dec 22, 2011
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2011

CVE-2011-42117.2The FakeFile implementation in the sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly control the openinCVE-2011-42127.2The sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly prevent os.popen calls, which allows local users CVE-2011-42137.2The sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly prevent use of the os module, which allows local CVE-2011-421410.0OneOrZero Action & Information Management System (AIMS) 2.7.0 allows remote attackers to bypass authentication and obtain administrator privCVE-2011-42157.5SQL injection vulnerability in lib/ooz_access.php in OneOrZero Action & Information Management System (AIMS) 2.7.0 allows remote attackers tCVE-2011-42169.3Investintech.com SlimPDF Reader does not properly restrict write operations, which allows remote attackers to cause a denial of service (appCVE-2011-42179.3Investintech.com SlimPDF Reader does not properly restrict read operations during block data moves, which allows remote attackers to cause aCVE-2011-42189.3Investintech.com SlimPDF Reader does not prevent faulting-instruction data from affecting write operations, which allows remote attackers toCVE-2011-42199.3Investintech.com SlimPDF Reader does not prevent faulting-address data from affecting branch selection, which allows remote attackers to cauCVE-2011-42209.3Investintech.com SlimPDF Reader does not properly restrict the arguments to unspecified function calls, which allows remote attackers to cauCVE-2011-42219.3Unspecified vulnerability in Investintech.com Able2Doc and Able2Doc Professional allows remote attackers to cause a denial of service (appliCVE-2011-42229.3Unspecified vulnerability in Investintech.com Able2Extract and Able2Extract Server allows remote attackers to cause a denial of service (app
CVE-2011-4203: Medium severity, CVSS 5.0 | Vulnix