Vulnerabilities > CVE-2004-1687 - Unspecified vulnerability in Snitz Communications Snitz Forums 2000

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
snitz-communications
exploit available
NVD
Published: 2004-09-16
Updated: 2017-07-11

Summary

CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the location parameter.

Vulnerable Configurations

Part Description Count
Application
Snitz_Communications
9

Exploit-Db

descriptionSnitz Forums 2000 Down.ASP HTTP Response Splitting Vulnerability. CVE-2004-1687 . Webapps exploit for asp platform
idEDB-ID:24604
last seen2016-02-02
modified2004-09-16
published2004-09-16
reporterMaestro De-Seguridad
sourcehttps://www.exploit-db.com/download/24604/
titleSnitz Forums 2000 Down.ASP HTTP Response Splitting Vulnerability

References