CVE-2004-1564
MEDIUM 5.0EPSS 6.1%
CRLF injection vulnerability in subscribe_thread.php in w-Agora 4.1.6a allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the thread parameter.
- CVSS v2.0 NVD
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N - EPSS
- 6.05% chance of exploitation in the next 30 days, 93rd percentile
- Published
- 2005-02-20
- Updated
- 2024-08-08
ExploitDB entries (1)
Security advisories
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/027040.html
- http://secunia.com/advisories/12695
- http://www.securityfocus.com/bid/11283