Description

CRLF injection vulnerability in Serendipity before 0.7rc1 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the url parameter in (1) index.php and (2) exit.php, or (3) the HTTP Referer field in comment.php.

Remediation

References

CVE-2004-1620

Related Vulnerabilities

Oracle HTTP Server Out-of-bounds Read Vulnerability (CVE-2020-26185)

Ampache Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-12385)

WordPress Plugin Formidable Forms-Contact Form, Survey, Quiz, Calculator & Custom Form Builder Cross-Site Scripting (5.0.06)

WordPress Plugin MoodThingy Mood Rating Widget 'postID' Parameter Blind SQL Injection (0.8.7)

Dolibarr Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-1010054)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2004-1620