CVE:CVE-2007-2550
CNNVD:CNNVD-200705-165
Devellion CubeCart 中存在多个CRLF注入漏洞。远程攻击者可以借助以对(1)cart.php或(2)index.php的"ccSID"开头的cookie名中的CRLF序列，注入任意的HTTP头和执行HTTP响应分离攻击。
solution:Upgrade devellion cubecart to a higher version than 3.0.15,and avoid the version 3.0.15