Vulnerability in Comersus Open Technologies Cart

CVE-2004-1656

CRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the redirecturl parameter.

EPSS: 0.023 (81.3th percentile) — read the EPSS interpretation.

Affected products

Comersus_open_technologies Comersus_cart — versions 5.0.991
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID, Vendor Advisory)