CVE-2004-1470

MEDIUM 5.0CVE-2004-1470 · Published 31/12/2004 · updated 16/06/2026

In short

CVE-2004-1470 is a MEDIUM (CVSS 5.0) vulnerability affecting snipsnap (snipsnap).
Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 84.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
snipsnap snipsnap	`= 0.5.2a`	No fix yet

Description

CRLF injection vulnerability in SnipSnap 0.5.2a, and other versions before 1.0b1, allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server.

References

marc.info
gentoo.org/security/en/glsa/glsa-200409-23.xml · Patch
securityfocus.com/bid/11180 · Exploit
snipsnap.org/space/start
exchange.xforce.ibmcloud.com/vulnerabilities/17364

More vulnerabilities in snipsnap

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free