CVE-2005-4712: PHP Handicapper

Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days.

CRLF injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the login parameter. NOTE: the vendor has disputed CVE-2005-3497, and it is possible that the dispute was intended to include this issue as well.

Affected products

• PHP Handicapper PHP Handicapper: any version

Published 2005-12-31. Last modified 2026-06-16.