CVE-2004-2146 CRLF injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows attackers to conduct HTTP response splitting attacks via the fid parameter in a writenew action to thread-post.asp.
MediumCVSS 5.0
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CRLF injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows attackers to conduct HTTP response splitting attacks via the fid parameter in a writenew action to thread-post.asp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pd9 software megabbs | = 2 | No fix listed |
| pd9 software megabbs | = 2.1 | No fix listed |
References
- 20040926 HTTP Response Splitting and SQL injection in megabbs forum exploit mailing-list
- 20040926 Re: HTTP Response Splitting and SQL injection in megabbs forum mailing-list
- www.pd9soft.com
- megabbs-response-splitting(17495) vdb-entry