Exploitation Summary
EIP tracks 1 public exploit for CVE-2004-1687. PoCs published by Maestro De-Seguridad.
AI-analyzed exploit summary This exploit demonstrates an HTTP response splitting vulnerability in Snitz Forums' 'down.asp' script. By injecting malicious headers via the 'location' parameter, an attacker can manipulate HTTP responses to serve arbitrary content.
Description
CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the location parameter.
Exploits (1)
This exploit demonstrates an HTTP response splitting vulnerability in Snitz Forums' 'down.asp' script. By injecting malicious headers via the 'location' parameter, an attacker can manipulate HTTP responses to serve arbitrary content.