Lucene search
MitreCVE-2004-1656HistoryFeb 20, 2005 - 5:00 a.m.
CVE-2004-1656
2005-02-2005:00:00
mitre
web.nvd.nist.gov
40
crlf injection
comersus shopping cart
http response splitting
vulnerability
remote attack
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
7.1
Confidence
Low
EPSS
0.016
Percentile
87.6%
CRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the redirecturl parameter.
Affected configurations
Node
comersus_open_technologiescomersus_cartMatch5.0.991
| Vendor | Product | Version | CPE |
|---|---|---|---|
| comersus_open_technologies | comersus_cart | 5.0.991 | cpe:2.3:a:comersus_open_technologies:comersus_cart:5.0.991:*:*:*:*:*:*:* |
Related
exploitdb
exploitdb
Comersus Cart 5.0 - HTTP Response Splitting
2004-09-01 00:00:00
nvd
nvd
CVE-2004-1656
2004-09-01 04:00:00
cvelist
cvelist
CVE-2004-1656
2005-02-20 05:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
7.1
Confidence
Low
EPSS
0.016
Percentile
87.6%
Related for CVE-2004-1656