← Back

CVE-2004-1516

nvd nist
Published: Dec 31, 2004Modified: Apr 16, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:P/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

CRLF injection vulnerability in index.php in phpWebSite 0.9.3-4 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the block_username parameter in the user module.

Affected (8)

Phpwebsite
1 product
Phpwebsite
Configuration A
8 vulnerable
Vulnerable SoftwareAffected Versions
Phpwebsite
Phpwebsite
Version 0.7.3
Phpwebsite
Version 0.8.2
Phpwebsite
Version 0.8.3
Phpwebsite
Version 0.9.3.1
Phpwebsite
Version 0.9.3.2
Phpwebsite
Version 0.9.3.3
Phpwebsite
Version 0.9.3.4
Phpwebsite
Version 0.9.3

References (12)

Source: cve@mitre.org
Source: cve@mitre.org
Patch
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
ExploitPatch
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatch
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.