CVE-2004-1564 CRLF injection vulnerability in subscribe_thread.php in w-Agora 4.1.6a allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the thread...
MediumCVSS 5.0
EPSS 6.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
CRLF injection vulnerability in subscribe_thread.php in w-Agora 4.1.6a allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the thread parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| w-agora | = 4.1.6a | No fix listed |
References
- 20040930 Multiple vulnerabilities in w-agora forum exploit mailing-list vendor-advisory
- 20040930 Multiple vulnerabilities in w-agora forum mailing-list
- 12695 patch third-party-advisory vendor-advisory
- 1011463 vdb-entry
- 11283 exploit vdb-entry
- wagora-response-splitting(17558) vdb-entry