5
CVE-2004-2054
- EPSS 0.56%
- Veröffentlicht 31.12.2004 05:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
- Quelle cve@mitre.org
- Teams Watchlist Login
- Unerledigt Login
CRLF injection vulnerability in PhpBB 2.0.4 and 2.0.9 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via (1) the mode parameter to privmsg.php or (2) the redirect parameter to login.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Phpbb Group ≫ Phpbb Version2.0.0
Phpbb Group ≫ Phpbb Version2.0.1
Phpbb Group ≫ Phpbb Version2.0.2
Phpbb Group ≫ Phpbb Version2.0.3
Phpbb Group ≫ Phpbb Version2.0.4
Phpbb Group ≫ Phpbb Version2.0.5
Phpbb Group ≫ Phpbb Version2.0.6
Phpbb Group ≫ Phpbb Version2.0.6c
Phpbb Group ≫ Phpbb Version2.0.6d
Phpbb Group ≫ Phpbb Version2.0.7
Phpbb Group ≫ Phpbb Version2.0.7a
Phpbb Group ≫ Phpbb Version2.0.8
Phpbb Group ≫ Phpbb Version2.0.8a
Phpbb Group ≫ Phpbb Version2.0.9
Phpbb Group ≫ Phpbb Version2.0_beta1
Phpbb Group ≫ Phpbb Version2.0_rc1
Phpbb Group ≫ Phpbb Version2.0_rc2
Phpbb Group ≫ Phpbb Version2.0_rc3
Phpbb Group ≫ Phpbb Version2.0_rc4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.56% | 0.673 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:P/A:N
|