CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2004-1687

CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the location parameter.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.077

EPSS Ranking 91.6%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2004-1687

Snitz Communications » Snitz Forums 2000 » Version: 3.0

cpe:2.3:a:snitz_communications:snitz_forums_2000:3.0
Snitz Communications » Snitz Forums 2000 » Version: 3.1

cpe:2.3:a:snitz_communications:snitz_forums_2000:3.1
Snitz Communications » Snitz Forums 2000 » Version: 3.3

cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3
Snitz Communications » Snitz Forums 2000 » Version: 3.3.01

cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.01
Snitz Communications » Snitz Forums 2000 » Version: 3.3.02

cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.02
Snitz Communications » Snitz Forums 2000 » Version: 3.3.03

cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.03
Snitz Communications » Snitz Forums 2000 » Version: 3.4.02

cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.02
Snitz Communications » Snitz Forums 2000 » Version: 3.4.03

cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.03
Snitz Communications » Snitz Forums 2000 » Version: 3.4.04

cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.04

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2004-1687

Products

Pricing

Contact Us