CVE-2004-1687

Published: Sep 16, 2004Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the location parameter.

Affected (9)

Products: Snitz Communications: Snitz Forums 2000

Snitz Communications

1 product

Snitz Forums 2000

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Snitz Communications Snitz Forums 2000	Version 3.0
Snitz Communications Snitz Forums 2000	Version 3.1 sr4
Snitz Communications Snitz Forums 2000	Version 3.3.01
Snitz Communications Snitz Forums 2000	Version 3.3.02
Snitz Communications Snitz Forums 2000	Version 3.3.03
Snitz Communications Snitz Forums 2000	Version 3.3
Snitz Communications Snitz Forums 2000	Version 3.4.02
Snitz Communications Snitz Forums 2000	Version 3.4.03
Snitz Communications Snitz Forums 2000	Version 3.4.04