CVE-2004-1656

  • Last update: Apr 13, 2023

Description

CRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the redirecturl parameter.

Software From Fixed in
comersus_open_technologies / comersus_cart 5.0.991 5.0.991.x

Details

    • Severity: Medium
  • CVE: CVE-2004-1656
  • Published: Sep 1, 2004
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:N/I:P/A:N