CVE-2004-1507

CVE-2004-1507 describes a CRLF injection vulnerability in the login.php component of WebCalendar, allowing remote attackers to inject CRLF sequences via the return_path parameter. This enables HTTP Response Splitting attacks, potentially modifying the expected HTML content from the server. With a CVSS score of 5.0 (medium severity), this vulnerability is easily exploitable over the network with low attack complexity and no authentication required, leading to partial integrity impact. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit or ExploitDB, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.