Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.309 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 195 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Search results for: header injection

Displaying 1 - 25 results out of 53

Pentest-Tools.com Vulnerabilities
Name	Detectable with	Detection added	CVSSv3	EPSS Score	EPSS Percentile	Exploitable with Sniper
phpMyFAQ <= 4.1.1 - SQL Injection CVE-2026-46364	Network Scanner	Jun 11, 2026	Critical(9.8)	0.02	0.76	No
LiteLLM - SQL Injection CVE-2026-42208	Network Scanner	Jun 1, 2026	Critical(9.8)	0.9	1	No
Fortinet FortiClientEMS 7.4.4 - SQL Injection CVE-2026-21643	Network Scanner	Apr 10, 2026	Critical(9.8)	0.95	1	No
Heimdall - Host Header Injection & Open Redirect CVE-2025-50578	Network Scanner	Apr 2, 2026	Medium(9.8)	0.03	0.86	No
Mailpit < 1.28.2 - SMTP CRLF Injection CVE-2026-23829	Network Scanner	Mar 13, 2026	Medium(5.3)	0.02	0.72	No
Cisco IOS Software Cisco Application-Hosting Framework HTTP Header Injection Vulnerability (cisco-sa-20160921-caf1) CVE-2016-6412	Network Scanner	Feb 25, 2026	Medium(6.5)	0.02	0.64	No
Ruby on Rails - Open Redirect via Host Header Injection CVE-2021-22881	Network Scanner	Jan 23, 2026	Medium(6.1)	0.88	1	No
Plone Docker - Host Header Injection CVE-2024-23055	Network Scanner	Jan 23, 2026	Medium(6.1)	0.01	0.58	No
LibreChat <= 0.7.9 - HTML Injection via Accept-Language Header CVE-2025-8848	Network Scanner	Dec 31, 2025	Medium(5.4)	0.01	0.36	No
Avigilon ACM - Host Header Injection CVE-2025-56266	Network Scanner	Dec 19, 2025	Medium(9.8)	0.03	0.86	No
Spam protection, AntiSpam, FireWall by CleanTalk < 5.153.4 - Unauthenticated Blind SQL Injection CVE-2021-24295	Network Scanner	Sep 25, 2025	High(7.5)	0.05	0.92	No
Scoold < 1.64.0 - Authentication Bypass CVE-2024-50334	Network Scanner	Jul 7, 2025	Medium(5.3)	0.02	0.62	No
Proxmox - CRLF Injection CVE-2022-35507	Network Scanner	Apr 22, 2025	High(7.1)	0.02	0.71	No
Response Header Injection	Website Scanner	Apr 7, 2025	High	N/A	N/A	No
System Dashboard < 2.8.10 - Cross-Site Scripting CVE-2023-7246	Network Scanner	Apr 5, 2025	Medium(5.4)	0.01	0.55	No
LimeSurvey < 6.6.1 Header Injection Vulnerability CVE-2024-42903	Network Scanner	Jan 27, 2025	Medium(6.5)	0.01	0.41	No
pfSense pfBlockerNG - OS Command Injection CVE-2022-40624	Network Scanner	Jan 20, 2025	Critical(9.8)	0.18	0.97	No
ECShop 2.x/3.x - SQL Injection	Network Scanner	Dec 2, 2024	Critical(10)	N/A	N/A	No
OpenVPN Access Server 2.1.4 - CRLF Injection CVE-2017-5868	Network Scanner	Oct 28, 2024	Medium(6.1)	0.05	0.91	No
openSIS < 9.1 - SQL Injection CVE-2024-35584	Network Scanner	Oct 23, 2024	High(8.8)	0.06	0.93	No
Joomla HTTP Header Unauthenticated - Remote Code Execution CVE-2015-8562	Network Scanner	Oct 17, 2024	High(7.5)	0.99	1	No
Python Email Header Injection Vulnerability (Aug 2024) - Windows CVE-2024-6923	Network Scanner	Oct 1, 2024	Medium(5.5)	0.01	0.54	No
Header Footer Code Manager < 1.1.14 - Admin+ SQL Injection CVE-2021-24791	Network Scanner	Oct 18, 2023	High(7.2)	0.06	0.92	No
Piwigo 13.7.0 - SQL Injection CVE-2023-37270	Network Scanner	Jul 20, 2023	High(8.8)	0.05	0.91	No
Netsweeper <=6.4.3 - Python Code Injection CVE-2020-13167	Network Scanner	Jul 4, 2023	Critical(9.8)	0.96	1	No

Vulnerability & Exploit Database

One of EMEA's fastest-growing tech companies

Independently audited company-wide ISMS

50,000+ security folks are here. Are you?

Security leaders trust what they can prove