CVE-2004-1687

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-09-16 · updated 2026-06-16

Description

CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the location parameter.

Affected products

Snitz Communications Snitz Forums 2000: 3.0, 3.1-sr4, 3.3, 3.3.01, 3.3.02, 3.3.03 (+3)

References

http://forum.snitz.com/forum/topic.asp?ARCHIVE=true&TOPIC_ID=54791
http://marc.info/?l=bugtraq&m=109537195413691&w=2
http://secunia.com/advisories/12590
http://www.securityfocus.com/bid/11201
https://exchange.xforce.ibmcloud.com/vulnerabilities/17421
http://forum.snitz.com/forum/topic.asp?ARCHIVE=true&TOPIC_ID=54791
http://marc.info/?l=bugtraq&m=109537195413691&w=2
http://secunia.com/advisories/12590
http://www.securityfocus.com/bid/11201
https://exchange.xforce.ibmcloud.com/vulnerabilities/17421

Get alerted when CVE-2004-1687 or the next vulnerability affects your stack