forum.snitz.comConfirmation
http://forum.snitz.com/forum/topic.asp?ARCHIVE=true&TOPIC_ID=54791 CVE-2004-1687
Snitz Forums 2000 - 'down.asp' HTTP Response Splitting
Record summary
CVE-2004-1687 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the location parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBSnitz Forums 2000 - 'down.asp' HTTP Response SplittingExploitDB exploitby Maestro De-SeguridadNot analyzed1 file
References
620040916 ADVISORY: security hole (http response splitting) in snitz forumsmailing list
http://marc.info/?l=bugtraq&m=109537195413691&w=2 12590Third-party advisory
http://secunia.com/advisories/12590 11201vdb entry
http://www.securityfocus.com/bid/11201 snitz-response-splitting(17421)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/17421 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2004-1687