Exploitation Summary
EIP tracks 1 public exploit for CVE-2004-1656. PoCs published by Maestro De-Seguridad.
AI-analyzed exploit summary This exploit demonstrates an HTTP response splitting vulnerability in Comersus Cart by injecting malicious headers via the 'redirecturl' parameter. The PoC manipulates the server's response to include arbitrary content, potentially leading to cache poisoning or XSS attacks.
Description
CRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the redirecturl parameter.
Exploits (1)
This exploit demonstrates an HTTP response splitting vulnerability in Comersus Cart by injecting malicious headers via the 'redirecturl' parameter. The PoC manipulates the server's response to include arbitrary content, potentially leading to cache poisoning or XSS attacks.