CVE-2004-1516: Phpwebsite

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

CRLF injection vulnerability in index.php in phpWebSite 0.9.3-4 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the block_username parameter in the user module.

Affected products

• Phpwebsite Phpwebsite: version 0.7.3 only; version 0.8.2 only; version 0.8.3 only; version 0.9.3 only; version 0.9.3.1 only; version 0.9.3.2 only; …

Published 2004-12-31. Last modified 2026-06-16.