CVE-2004-1584

MEDIUM 5.0CVE-2004-1584 · Published 31/12/2004 · updated 16/06/2026

Package	Affected versions	Patched versions
wordpress wordpress	`= 1.2`	No fix yet

Description

CRLF injection vulnerability in wp-login.php in WordPress 1.2 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the text parameter.

References

marc.info
secunia.com/advisories/12773 · Patch
wordpress.org/development/2004/10/wp-121 · Patch
gentoo.org/security/en/glsa/glsa-200410-12.xml · Patch
securityfocus.com/bid/11348 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/17649

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free