CVE-2004-1656

UNKNOWN

CRLF injection vulnerability in Comersus Shopping Cart 5

Published Feb 20, 2005

Modified 1 years ago

Details

CRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the redirecturl parameter.

References

WEB

http://marc.info/?l=bugtraq&m=109405777905519&w=2

WEB

http://www.securityfocus.com/bid/11083

WEB

https://exchange.xforce.ibmcloud.com/vulnerabilities/17201

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2004-1656

CVSS Analysis

CVSS v2.0

5.0

Exploitability

Access Vector

NetworkAV:N

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

NoneC:N

Integrity

PartialI:P

Availability

NoneA:N

5/AV:N/AC:L/Au:N/C:N/I:P/A:N

Ecosystems

Timeline

PublishedFeb 20, 2005

ModifiedAug 8, 2024