CVE-2004-1687

2005-02-2005:00:00

mitre

www.cve.org

AI Score

6.8

Confidence

Low

EPSS

0.014

Percentile

86.7%

JSON

CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the location parameter.

References

forum.snitz.com/forum/topic.asp?ARCHIVE=true&TOPIC_ID=54791

marc.info/?l=bugtraq&m=109537195413691&w=2

secunia.com/advisories/12590

www.securityfocus.com/bid/11201

exchange.xforce.ibmcloud.com/vulnerabilities/17421