Back
CVE-2004-1656
CRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the redirecturl parameter.
Published: Sep 1, 2004
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| comersus_open_technologies | comersus_cart | 5.0.991 |
GitHub Security Advisory GHSA-7mr8-86xj-xmxp
CRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform...
References (6)
- http://marc.info/?l=bugtraq&m=109405777905519&w=2
- http://www.securityfocus.com/bid/11083 Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17201
- http://marc.info/?l=bugtraq&m=109405777905519&w=2
- http://www.securityfocus.com/bid/11083 Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17201
Risk Scores
CVSS Score
5.0 / 10
EPSS Score
2.28%
Top 18% most likely to be exploited
Threat Score
20.7 / 100
Data Sources
NVD
EPSS
GitHub