CVE-2004-1470 in Snipsnap

Riassunto

di MITRE

CRLF injection vulnerability in SnipSnap 0.5.2a, and other versions before 1.0b1, allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Prenotare: 13/02/2005
• Divulgazione: 31/12/2004
• Moderazione: accettato
• Voce: VDB-22759
• CPE: pronto
• CWE: CWE-80 (confermato)
• Sfruttamento: Scaricare
• CVSS: 5.0 (NVD)
• EPSS: 0.02437
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-1470
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-1470
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-1470/