CVE-2004-2054 — CRLF Injection in Group Phpbb

2 documents2 sources
Severity
5.0MEDIUMNVD
EPSS
0.6%
top 31.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Phpbb Group Phpbb
Timeline
PublishedDec 31
Latest updateApr 29

Description

CRLF injection vulnerability in PhpBB 2.0.4 and 2.0.9 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via (1) the mode parameter to privmsg.php or (2) the redirect parameter to login.php.

CVSS vector

AV:N/AC:L/C:N/I:P/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDphpbb_group/phpbb19 versions+18

🔴Vulnerability Details

1
GHSA
GHSA-r63j-h6gp-7jxq: CRLF injection vulnerability in PhpBB 2↗2022-04-29
▶