5
CVE-2004-1687
- EPSS 2.44%
- Veröffentlicht 16.09.2004 04:00:00
- Zuletzt bearbeitet 16.06.2026 22:08:12
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the location parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Snitz Communications ≫ Snitz Forums 2000 Version3.0
Snitz Communications ≫ Snitz Forums 2000 Version3.1 Updatesr4
Snitz Communications ≫ Snitz Forums 2000 Version3.3
Snitz Communications ≫ Snitz Forums 2000 Version3.3.01
Snitz Communications ≫ Snitz Forums 2000 Version3.3.02
Snitz Communications ≫ Snitz Forums 2000 Version3.3.03
Snitz Communications ≫ Snitz Forums 2000 Version3.4.02
Snitz Communications ≫ Snitz Forums 2000 Version3.4.03
Snitz Communications ≫ Snitz Forums 2000 Version3.4.04
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.44% | 0.822 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:P/A:N
|
http://forum.snitz.com/forum/topic.asp?ARCHIVE=true&TOPIC_ID=54791
http://marc.info/?l=bugtraq&m=109537195413691&w=2
http://secunia.com/advisories/12590
http://www.securityfocus.com/bid/11201
https://exchange.xforce.ibmcloud.com/vulnerabilities/17421