Snitz Forums 2000 Down.ASP HTTP Response Splitting Vulnerability

ID EDB-ID:24604
Type exploitdb
Reporter Maestro De-Seguridad
Modified 2004-09-16T00:00:00


Snitz Forums 2000 Down.ASP HTTP Response Splitting Vulnerability. CVE-2004-1687 . Webapps exploit for asp platform


Snitz Forums is reported prone to a HTTP response splitting vulnerability. The issue exists in a parameter of the 'down.asp' script. The issue presents itself due to a flaw in the affected script that allows an attacker to 
manipulate how GET requests are handled.

A remote attacker may exploit this vulnerability to influence or misrepresent how web content is served, cached or interpreted.

POST /down.asp HTTP/1.0
Content-Type: application/x-www-form-urlencoded
Content-length: 134


(replace curly braces with less than and greater than symbols)