Unscored CVE-2004-2146 EUVD-2004-2138GHSA-26ww-4j8h-6752

CRLF injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows attackers to conduct HTTP response splitting attacks via the fid para…

Published Jul 1, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

CRLF injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows attackers to conduct HTTP response splitting attacks via the fid parameter in a writenew action to thread-post.asp.

References

20040926 Re: HTTP Response Splitting and SQL injection in megabbs forum mailing-list
megabbs-response-splitting(17495) vdb-entry
http://www.pd9soft.com/megabbs/forums/thread-view.asp?tid=4924
20040926 HTTP Response Splitting and SQL injection in megabbs forum mailing-list