CVE-2004-1620

Published: Oct 21, 2004Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

CRLF injection vulnerability in Serendipity before 0.7rc1 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the url parameter in (1) index.php and (2) exit.php, or (3) the HTTP Referer field in comment.php.

Affected (14)

Products: S9y: Serendipity

1 product

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
S9y Serendipity	Version 0.3
S9y Serendipity	Version 0.4
S9y Serendipity	Version 0.5
S9y Serendipity	Version 0.5_pl1
S9y Serendipity	Version 0.6
S9y Serendipity	Version 0.6_pl1
S9y Serendipity	Version 0.6_pl2
S9y Serendipity	Version 0.6_pl3
S9y Serendipity	Version 0.6_rc1
S9y Serendipity	Version 0.6_rc2
S9y Serendipity	Version 0.7_beta1
S9y Serendipity	Version 0.7_beta2
S9y Serendipity	Version 0.7_beta3
S9y Serendipity	Version 0.7_beta4

References (26)

http://cvs.sourceforge.net/viewcvs.py/php-blog/serendipity/comment.php?rev=1.49&view=markup

Source: cve@mitre.org

http://cvs.sourceforge.net/viewcvs.py/php-blog/serendipity/exit.php?rev=1.10&view=markup

Source: cve@mitre.org

http://cvs.sourceforge.net/viewcvs.py/php-blog/serendipity/index.php?rev=1.52&view=markup

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=109841283115808&w=2

Source: cve@mitre.org

http://secunia.com/advisories/12909/

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://securitytracker.com/id?1011864

Source: cve@mitre.org

http://sourceforge.net/project/shownotes.php?release_id=276694

Source: cve@mitre.org

http://www.osvdb.org/11013

Source: cve@mitre.org

http://www.osvdb.org/11038

Source: cve@mitre.org

http://www.osvdb.org/11039

Source: cve@mitre.org

http://www.s9y.org/5.html

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.securityfocus.com/bid/11497

Source: cve@mitre.org

ExploitPatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/17798

Source: cve@mitre.org

http://cvs.sourceforge.net/viewcvs.py/php-blog/serendipity/comment.php?rev=1.49&view=markup

Source: af854a3a-2127-422b-91ae-364da2661108

http://cvs.sourceforge.net/viewcvs.py/php-blog/serendipity/exit.php?rev=1.10&view=markup

Source: af854a3a-2127-422b-91ae-364da2661108

http://cvs.sourceforge.net/viewcvs.py/php-blog/serendipity/index.php?rev=1.52&view=markup

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=109841283115808&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/12909/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

http://securitytracker.com/id?1011864

Source: af854a3a-2127-422b-91ae-364da2661108

http://sourceforge.net/project/shownotes.php?release_id=276694

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/11013

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/11038

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/11039

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.s9y.org/5.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

http://www.securityfocus.com/bid/11497

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/17798

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.