Lucene search
HistoryDec 31, 2004 - 5:00 a.m.
CVE-2004-2054
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.8
Confidence
Low
EPSS
0.005
Percentile
77.5%
CRLF injection vulnerability in PhpBB 2.0.4 and 2.0.9 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via (1) the mode parameter to privmsg.php or (2) the redirect parameter to login.php.
Affected configurations
Node
phpbb_groupphpbbMatch2.0.0
ORphpbb_groupphpbbMatch2.0.1
ORphpbb_groupphpbbMatch2.0.2
ORphpbb_groupphpbbMatch2.0.3
ORphpbb_groupphpbbMatch2.0.4
ORphpbb_groupphpbbMatch2.0.5
ORphpbb_groupphpbbMatch2.0.6
ORphpbb_groupphpbbMatch2.0.6c
ORphpbb_groupphpbbMatch2.0.6d
ORphpbb_groupphpbbMatch2.0.7
ORphpbb_groupphpbbMatch2.0.7a
ORphpbb_groupphpbbMatch2.0.8
ORphpbb_groupphpbbMatch2.0.8a
ORphpbb_groupphpbbMatch2.0.9
ORphpbb_groupphpbbMatch2.0_beta1
ORphpbb_groupphpbbMatch2.0_rc1
ORphpbb_groupphpbbMatch2.0_rc2
ORphpbb_groupphpbbMatch2.0_rc3
ORphpbb_groupphpbbMatch2.0_rc4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| phpbb_group | phpbb | 2.0.0 | cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:* |
| phpbb_group | phpbb | 2.0.1 | cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:* |
| phpbb_group | phpbb | 2.0.2 | cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:* |
| phpbb_group | phpbb | 2.0.3 | cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:* |
| phpbb_group | phpbb | 2.0.4 | cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:* |
| phpbb_group | phpbb | 2.0.5 | cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:* |
| phpbb_group | phpbb | 2.0.6 | cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:* |
| phpbb_group | phpbb | 2.0.6c | cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:* |
| phpbb_group | phpbb | 2.0.6d | cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:* |
| phpbb_group | phpbb | 2.0.7 | cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2004-2054
2005-05-10 04:00:00
cve
cve
CVE-2004-2054
2005-05-10 04:00:00
openvas
openvas
phpBB < 2.0.10
2005-11-03 00:00:00
phpBB < 2.0.10 Multiple Vulnerabilities
2005-11-03 00:00:00
nessus
nessus
phpBB < 2.0.10 Multiple XSS
2004-07-26 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.8
Confidence
Low
EPSS
0.005
Percentile
77.5%
Related for NVD:CVE-2004-2054