CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2004-1620

CRLF injection vulnerability in Serendipity before 0.7rc1 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the url parameter in (1) index.php and (2) exit.php, or (3) the HTTP Referer field in comment.php.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.084

EPSS Ranking 91.9%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2004-1620

S9y » Serendipity » Version: 0.3

cpe:2.3:a:s9y:serendipity:0.3
S9y » Serendipity » Version: 0.4

cpe:2.3:a:s9y:serendipity:0.4
S9y » Serendipity » Version: 0.5

cpe:2.3:a:s9y:serendipity:0.5
S9y » Serendipity » Version: 0.5_pl1

cpe:2.3:a:s9y:serendipity:0.5_pl1
S9y » Serendipity » Version: 0.6

cpe:2.3:a:s9y:serendipity:0.6
S9y » Serendipity » Version: 0.6_pl1

cpe:2.3:a:s9y:serendipity:0.6_pl1
S9y » Serendipity » Version: 0.6_pl2

cpe:2.3:a:s9y:serendipity:0.6_pl2
S9y » Serendipity » Version: 0.6_pl3

cpe:2.3:a:s9y:serendipity:0.6_pl3
S9y » Serendipity » Version: 0.6_rc1

cpe:2.3:a:s9y:serendipity:0.6_rc1
S9y » Serendipity » Version: 0.6_rc2

cpe:2.3:a:s9y:serendipity:0.6_rc2
S9y » Serendipity » Version: 0.7_beta1

cpe:2.3:a:s9y:serendipity:0.7_beta1
S9y » Serendipity » Version: 0.7_beta2

cpe:2.3:a:s9y:serendipity:0.7_beta2
S9y » Serendipity » Version: 0.7_beta3

cpe:2.3:a:s9y:serendipity:0.7_beta3
S9y » Serendipity » Version: 0.7_beta4

cpe:2.3:a:s9y:serendipity:0.7_beta4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2004-1620

Products

Pricing

Contact Us