Threats tagged 'ghsa-xfj2-w4fv-cg6j'

A weakness in jameschz Hush Framework 2.0 allows remote attackers to manipulate the HTTP Host header due to improper neutralization of HTTP headers in the HTTP Host Header Handler component. This vulnerability affects an unknown function in the file Hush\hush-lib\hush\Util.php and can lead to scripting syntax issues. Public exploit code is available, but no vendor response or patch has been provided.