CVE-2004-1516

CVE-2004-1516 describes a CRLF injection vulnerability in phpWebSite 0.9.3-4, specifically within the index.php file's user module. This flaw allows remote attackers to perform HTTP Response Splitting attacks by manipulating the block_username parameter, potentially modifying the expected HTML content returned to users. The vulnerability has a CVSS score of 5.0, indicating a medium severity, with no authentication required and only partial impact on integrity. There is no evidence of active exploitation, nor are there public exploits available in Metasploit or ExploitDB, though it has garnered significant community discussion.