Back
CVE-2004-1687
CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the location parameter.
Published: Sep 16, 2004
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (9)
| Vendor | Product | Version |
|---|---|---|
| snitz_communications | snitz_forums_2000 | 3.0 |
| snitz_communications | snitz_forums_2000 | 3.1 |
| snitz_communications | snitz_forums_2000 | 3.3 |
| snitz_communications | snitz_forums_2000 | 3.3.01 |
| snitz_communications | snitz_forums_2000 | 3.3.02 |
| snitz_communications | snitz_forums_2000 | 3.3.03 |
| snitz_communications | snitz_forums_2000 | 3.4.02 |
| snitz_communications | snitz_forums_2000 | 3.4.03 |
| snitz_communications | snitz_forums_2000 | 3.4.04 |
GitHub Security Advisory GHSA-xrcm-f723-98ww
CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to...
References (10)
- http://forum.snitz.com/forum/topic.asp?ARCHIVE=true&TOPIC_ID=54791 Vendor Advisory
- http://marc.info/?l=bugtraq&m=109537195413691&w=2
- http://secunia.com/advisories/12590 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/11201 Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17421
- http://forum.snitz.com/forum/topic.asp?ARCHIVE=true&TOPIC_ID=54791 Vendor Advisory
- http://marc.info/?l=bugtraq&m=109537195413691&w=2
- http://secunia.com/advisories/12590 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/11201 Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17421
Risk Scores
CVSS Score
5.0 / 10
EPSS Score
2.44%
Top 17% most likely to be exploited
Threat Score
20.7 / 100
Data Sources
NVD
EPSS
GitHub