CVE-2004-1516

2005-02-1905:00:00

[email protected]

web.nvd.nist.gov

crlf injection

phpwebsite

http response splitting

vulnerability

index.php

cve-2004-1516

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.7 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.9%

JSON

CRLF injection vulnerability in index.php in phpWebSite 0.9.3-4 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the block_username parameter in the user module.

Affected configurations

NVD

Node

phpwebsitephpwebsiteMatch0.7.3

phpwebsitephpwebsiteMatch0.8.2

phpwebsitephpwebsiteMatch0.8.3

phpwebsitephpwebsiteMatch0.9.3

phpwebsitephpwebsiteMatch0.9.3.1

phpwebsitephpwebsiteMatch0.9.3.2

phpwebsitephpwebsiteMatch0.9.3.3

phpwebsitephpwebsiteMatch0.9.3.4

CPENameOperatorVersion
phpwebsite:phpwebsitephpwebsiteeq0.7.3
phpwebsite:phpwebsitephpwebsiteeq0.8.2
phpwebsite:phpwebsitephpwebsiteeq0.8.3
phpwebsite:phpwebsitephpwebsiteeq0.9.3
phpwebsite:phpwebsitephpwebsiteeq0.9.3.1
phpwebsite:phpwebsitephpwebsiteeq0.9.3.2
phpwebsite:phpwebsitephpwebsiteeq0.9.3.3
phpwebsite:phpwebsitephpwebsiteeq0.9.3.4

CPE	Name	Operator	Version
phpwebsite:phpwebsite	phpwebsite	eq	0.7.3
phpwebsite:phpwebsite	phpwebsite	eq	0.8.2
phpwebsite:phpwebsite	phpwebsite	eq	0.8.3
phpwebsite:phpwebsite	phpwebsite	eq	0.9.3
phpwebsite:phpwebsite	phpwebsite	eq	0.9.3.1
phpwebsite:phpwebsite	phpwebsite	eq	0.9.3.2
phpwebsite:phpwebsite	phpwebsite	eq	0.9.3.3
phpwebsite:phpwebsite	phpwebsite	eq	0.9.3.4