5
CVE-2004-2146
- EPSS 1.25%
- Veröffentlicht 31.12.2004 05:00:00
- Zuletzt bearbeitet 16.06.2026 22:09:05
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCRLF injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows attackers to conduct HTTP response splitting attacks via the fid parameter in a writenew action to thread-post.asp.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Pd9 Software ≫ Megabbs Version2
Pd9 Software ≫ Megabbs Version2.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.25% | 0.656 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:P/A:N
|
http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0962.html
http://marc.info/?l=bugtraq&m=109631200701134&w=2
http://www.pd9soft.com/megabbs/forums/thread-view.asp?tid=4924
https://exchange.xforce.ibmcloud.com/vulnerabilities/17495