5.0med
CVE-2004-16561 exploit
CRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform HTTP Response Splitting attacks to modify…
Published 22 y ago · modified 4 mo ago · JSON
CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.3%
percentile 83%
Public exploits
1
Exploit-DB
Summary
CRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the redirecturl parameter.
Exploit prediction (EPSS)
2.28% probability of exploitation in the next 30 days, higher than 83% of all scored CVEs.
Exploits and detections
- EDB-24422 Comersus Cart 5.0 - HTTP Response Splitting · webapps · 2004-09-01
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:N/I:P/A:N |
References
- marc.info /?l=bugtraq&m=109405777905519&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/17201 · vdb-entry, x_refsource_XF, x_transferred
- securityfocus.com /bid/11083 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2004-1656
- NVD: CVE-2004-1656
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.