CVE-2004-2146: PD9 Software Megabbs

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

CRLF injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows attackers to conduct HTTP response splitting attacks via the fid parameter in a writenew action to thread-post.asp.

Affected products

• PD9 Software Megabbs: version 2 only; version 2.1 only

Published 2004-12-31. Last modified 2026-06-16.