NVD

Id
71999  
Name
CVE-2004-1620  
Description
CRLF injection vulnerability in Serendipity before 0.7rc1 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the url parameter in (1) index.php and (2) exit.php, or (3) the HTTP Referer field in comment.php.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-07-18  
Published
2004-10-21  
Modified Date
2017-07-10  
Seq
2004-1620  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
372085 71999 CVE-2004-1620 http://cvs.sourceforge.net/viewcvs.py/php-blog/serendipity/comment.php?rev=1.49&view=markup  View
372086 71999 CVE-2004-1620 http://cvs.sourceforge.net/viewcvs.py/php-blog/serendipity/exit.php?rev=1.10&view=markup  View
372087 71999 CVE-2004-1620 http://cvs.sourceforge.net/viewcvs.py/php-blog/serendipity/index.php?rev=1.52&view=markup  View
372088 71999 CVE-2004-1620 20041021 HTTP Response Splitting in Serendipity 0.7-beta4  View
372089 71999 CVE-2004-1620 1011864  View
372090 71999 CVE-2004-1620 http://sourceforge.net/project/shownotes.php?release_id=276694  View
372091 71999 CVE-2004-1620 http://www.s9y.org/5.html  View
372092 71999 CVE-2004-1620 11497  View
372093 71999 CVE-2004-1620 serendipity-response-splitting(17798)  View

Related JVN