Test ID:	1.3.6.1.4.1.25623.1.0.114133
Category:	Web Servers
Title:	Embedthis GoAhead 2.5.0 HTTP Header Injection Vulnerability - Active Check
Summary:	Embedthis GoAhead is prone to an HTTP header injection; vulnerability.
Description:	Summary: Embedthis GoAhead is prone to an HTTP header injection vulnerability. Vulnerability Insight: For certain pages, Embedthis GoAhead creates links containing a hostname obtained from an arbitrary HTTP Host header sent by an attacker. Vulnerability Impact: An attacker can potentially use this vulnerability in a phishing attack. Affected Software/OS: Embedthis GoAhead version 2.5.0 is known to be affected. Other versions might be affected as well. Solution: No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-16645 http://packetstormsecurity.com/files/154652/GoAhead-2.5.0-Host-Header-Injection.html https://github.com/Ramikan/Vulnerabilities/blob/master/GoAhead%20Web%20server%20HTTP%20Header%20Injection
Copyright	Copyright (C) 2019 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.