CVE-2004-2743

upload.cgi in Mega Upload Progress Bar before 1.45 allows remote attackers to copy or overwrite arbitrary files via unspecified parameters related to names of uploaded files...

CVE-2004-2742

Cross-site scripting (XSS) vulnerability in the Crystal Enterprise report viewer affects versions 8.5, 9, and 10. The issue allows remote attackers to inject arbitrary web script or HTML by crafting a script in the URL to a report (RPT) file, leveraging unsanitized input in the report viewer. The...

CVE-2004-2734

The CVE-2004-2734 issue affects Novell Web Manager on NetWare 6.5, where webadmin-apache.conf uses an uppercase Alias tag with a conflicting lowercase directory tag for a volume, enabling remote attackers to bypass access controls on the WEB-INF folder. This is confirmed in the NVD/NVD-derived de...

VulnCheck KEV: CVE-2007-3899

Unspecified vulnerability in Microsoft Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a malformed string in a Word file, aka "Word Memory Corruption Vulnerability."...

CVE-2004-2720

Cross-site scripting XSS vulnerability in register.asp in Snitz Forums 2000 3.4.04 and earlier allows remote attackers to inject arbitrary web script or HTML via javascript events in the Email parameter...

CVE-2004-2697

Technical details for CVE-2004-2697 are not publicly available in the provided documents; monitor for updates.

CVE-2004-2714

Technical details about CVE-2004-2714 are not publicly available in the provided documents. Monitor for updates.

CVE-2004-2700

CVE-2004-2700 affects AspDotNetStorefront 3.3, where an unrestricted file upload via admin/images.aspx allows remote authenticated administrators to upload files with executable extensions. This is documented across multiple sources (NVD entry and vendor/partner advisories). The core issue is imp...

CVE-2004-2723

CVE-2004-2723 affects NessusWX 1.4.4, which stores account passwords in plaintext in .session files. This local-privilege–limited vulnerability can allow local users to obtain passwords; the provided sources do not specify a remediation or fix version. No exploitation details are provided in the ...

CVE-2004-2716

CVE-2004-2716 describes multiple SQL injection vulnerabilities in PHPMyChat 0.14.5’s usersL.php3, allowing remote attackers to execute arbitrary SQL commands via parameters (sortBy, sortOrder, startReg, U, LastCheck, R). The underlying issue is unsafely constructed SQL queries in that script, ena...

CVE-2004-2701

CVE-2004-2701 is a cross-site scripting (XSS) vulnerability in AspDotNetStorefront 3.3, specifically in signin.aspx where an attacker can inject arbitrary web script or HTML via the returnurl parameter. Affected component is the signin.aspx handling of returnurl; root cause is improper handling o...

CVE-2004-2724

The CVE-2004-2724 entry affects LionMax Software Chat Anywhere 2.72a. A crafted username beginning with a percent sign followed by a null character can trigger a denial of service, causing the server to crash and the client to exhibit high CPU usage. The connected documents confirm this vulnerabi...

CVE-2004-2722

Nessus 2.0.10a stores account passwords in plaintext in .nessusrc files, enabling local users to obtain passwords. This issue is noted with vendor dispute. A remediation suggestion is to restrict access to .nessusrc files; no fixed version is provided in the sources.

CVE-2004-2710

CVE-2004-2710 affects Gyach Enhanced (Gyach-E) prior to 1.0.3. Multiple buffer overflows allow a remote attacker to cause a denial of service (crash) and possibly execute arbitrary code via two vectors: (1) sending certain typing statuses, and (2) setting the chat room status bar to the current c...

CVE-2004-2706

The vulnerability CVE-2004-2706 affects Gyach Enhanced (Gyach-E) before 1.0.4. An remote attacker can trigger a denial of service (crash) by sending conference packets containing error messages. Mitigation: upgrade Gyach-E to version 1.0.4 or later, per referenced entries. The connected documents...

CVE-2004-2709

The vulnerability CVE-2004-2709 affects Gyach Enhanced (Gyach-E) before 1.0.4, where a buffer overflow in the strip_html_tags method can be triggered remotely via HTML tags, potentially causing a denial of service or arbitrary code execution. Exploitation vectors are not detailed in the provided ...

CVE-2004-2708

Gyach Enhanced (Gyach-E) before 1.0.0 stores passwords in plaintext in its configuration file, enabling an attacker with access to the file to obtain user passwords. This vulnerability is associated with CVE-2004-2708 and is corroborated by multiple sources in the connected documents (Red Hat, CV...

CVE-2004-2705

PvPGN (Player vs. Player Gaming Network) is affected by CVE-2004-2705 up to version 1.6.3. The vulnerability allows remote attackers to obtain attributes of arbitrary accounts, including password hashes, by sending certain statsreq packets. The root cause is not explicitly detailed in the provide...

CVE-2004-2713

CVE-2004-2713 affects Zone Alarm Pro 1.0–5.1. The issue is a local denial-of-service caused by improper permissions on the %windir%\Internet Logs directory, which is accessible to the EVERYONE group. Local users can modify folder contents or permissions, potentially preventing Zone Alarm Pro from...

CVE-2004-2724

LionMax Software Chat Anywhere 2.72a allows remote attackers to cause a denial of service server crash and client CPU consumption via a username beginning with percent % followed by a null character...