CVE-2009-1404

CVE-2009-1404 affects PastelCMS 0.8.0 (admin.php). The vulnerability is a SQL injection in which, when magic_quotes_gpc is disabled, a remote attacker can cause arbitrary SQL commands via the user (Username) parameter. The description from NVD confirms the form of injection and affected component...

CVE-2009-1404

creationtimestamp| type| source ---|---|--- 2009-04-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8502...

CVE-2008-1404

SQL injection vulnerability in index.php in the Viso Industry Book 2.04 and 2.03 module for eXV2 allows remote attackers to execute arbitrary SQL commands via the kid parameter...

CVE-2008-1404

CVE-2008-1404 describes an SQL injection in the Viso (Industry Book) module for eXV2, affecting versions 2.04 and 2.03. The vulnerability is in index.php via the kid parameter, allowing remote attackers to execute arbitrary SQL commands. No remediation details are provided in the connected docume...

CVE-2008-1404

creationtimestamp| type| source ---|---|--- 2008-03-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5254...

Debian DSA-1404-1 : gallery2 - programming error

Nicklous Roberts discovered that the Reupload module of Gallery 2, a web-based photo management application, allowed unauthorized users to edit Gallery's data file. The oldstable distribution sarge does not contain a gallery2 package. The previous gallery package is not affected by this...

CVE-2003-1404

DotBr 0.1 stores its config.inc under the web document root with insufficient access control, enabling remote attackers to obtain sensitive data such as SQL usernames and passwords. The CVE entry (CVE-2003-1404) lists a high impact (base score 7.5, confidentiality and integrity partial) and notes...

CVE-2007-1404

This CVE concerns ProSysInfo TFTPDWIN 0.4.2’s tftpd.exe, where a remote attacker can trigger a denial of service by sending a long UDP packet to recv_from. Several sources describe a long filename input leading to a stack/buffer overflow, with exploit code and mitigations tied to CVE-2006-4948 re...

CVE-2006-1404

This CVE (CVE-2006-1404) affects BlankOL 1.0 and earlier, via bol.cgi, where two XSS vectors (parameters named file and function) allow remote attackers to inject arbitrary web script or HTML. The vulnerability is described as multiple XSS issues; in the NVD entry the affected component is bol.cg...

CVE-2005-1404

MyPHP Forum 1.0 allows remote attackers to spoof the username by modifying the 1 nbuser parameter to post.php or 2 sender parameter to privmsg.php...

CVE-2004-1404

Attachment Mod 2.3.10 module for phpBB, when used with Apache modmime, does not properly handle files with multiple file extensions, such as .php.rar, which allows remote attackers to upload and execute arbitrary code...

CVE-2004-1404

The CVE-2004-1404 entry concerns the Attachment Mod 2.3.10 module for phpBB when used with Apache mod_mime. The vulnerability arises from improper handling of files with double extensions (e.g., .php.rar), which can enable remote attackers to upload and execute arbitrary code on the server. The p...

CVE-2004-1404

Attachment Mod 2.3.10 module for phpBB, when used with Apache modmime, does not properly handle files with multiple file extensions, such as .php.rar, which allows remote attackers to upload and execute arbitrary code...

CVE-2002-1404

CVE-2002-1404 is rejected/not used; reference CVE-2002-1348 instead.

CVE-2001-1404

CVE-2001-1404 describes a vulnerability in Bugzilla prior to version 2.14 where passwords were stored in plaintext and password requests could be sent via email. The underlying issue is insecure password handling, enabling privilege escalation if an attacker could access or intercept credentials....

CVE-1999-1404

IBM/Tivoli OPC Tracker Agent version 2 release 1 allows remote attackers to cause a denial of service resource exhaustion via malformed data to the localtracker client port 5011, which prevents the connection from being closed properly...

CVE-1999-1404

Summary of CVE-1999-1404: IBM/Tivoli OPC Tracker Agent version 2 release 1 is affected. The vulnerability allows remote attackers to cause a denial of service (resource exhaustion) by sending malformed data to the localtracker client port (5011), preventing the connection from being closed proper...

CVE-1999-1404

IBM/Tivoli OPC Tracker Agent version 2 release 1 allows remote attackers to cause a denial of service resource exhaustion via malformed data to the localtracker client port 5011, which prevents the connection from being closed properly...