CVE-2004-2721

The CVE-2004-2721 entry describes a vulnerability in openSkat VTMF prior to 2.1 where the CheckGroup function generates public key pairs with a non-prime p, enabling remote attackers to determine the private key and decrypt messages. The documents do not provide a confirmed exploit path, affected...

CVE-2004-2717

Technical details for CVE-2004-2717 are not publicly available in the provided documents; monitor for updates from Vulners and related advisories.

CVE-2004-2711

CVE-2004-2711 affects Gyach Enhanced (Gyach-E) prior to 1.0.2. The issue is described as multiple buffer overflows in avatar retrieval logic that can allow a remote attacker to crash the application or potentially execute arbitrary code. The connected sources confirm the affected product/version ...

CVE-2004-2704

HastyMail (PHP-based mail client) does not send the attachment parameter in the Content-Disposition header for attachments in versions ≤1.0.1 (stable) and ≤1.1 (development). This causes attachments to render inline in Internet Explorer when the download link is clicked, facilitating cross-site s...

CVE-2004-2698

The CVE-2004-2698 entry concerns a race condition in IMWheel before or at 1.0.0pre11 when run with the -k option. This condition can allow a local attacker to cause a denial of service (IMWheel crash) and, via a symlink attack on the imwheel.pid file, potentially modify arbitrary files. The conne...

CVE-2004-2699

CVE-2004-2699 : deleteicon.aspx in AspDotNetStorefront 3.3 allows an unauthenticated remote attacker to delete arbitrary product images by modifying the ProductID parameter. This affects image integrity (partial impact) per the NVD CVSS2 vector (AV:N/AC:M/Au:N/C:N/I:P/A:N) with a base score of 4....

CVE-2004-2719

The CVE-2004-2719 entry concerns Foxmail 5.0.300, where a buffer overflow in the UrlToLocal function of PunyLib.dll can be triggered by a mail message with a long From field. This vulnerability allows remote attackers to potentially execute arbitrary code due to the overflow in UrlToLocal. The de...

CVE-2004-2696

BEA WebLogic Server/Express versions 6.1, 7.0, and 8.1 with RMI over IIOP are affected. The issue arises when multiple logins from the same client occur, potentially causing an incorrect or “unexpected user identity” to be used in an RMI call. The available documents describe the affected product...

CVE-2004-2720

The vulnerability CVE-2004-2720 affects Snitz Forums 2000 (versions 3.4.04 and earlier) where a cross-site scripting (XSS) flaw exists in register.asp. The root cause is unvalidated input in the Email parameter, allowing an attacker to inject arbitrary web script or HTML via javascript events. Th...

CVE-2004-2718

PHPMyChat 0.14.5 is affected by CVE-2004-2718: an issue where setup.php3 is not removed or protected after installation, allowing direct requests to reveal sensitive information such as database passwords. Impact is partial confidentiality loss as described; no exploitation details or active expl...

CVE-2004-2715

CVE-2004-2715 affects PHPMyChat 0.14.5 where edituser.php3 allows remote attackers to bypass authentication and gain administrative privileges by setting the do_not_login parameter to false. The root cause is a parameter-based authentication bypass in the admin workflow, enabling escalation of pr...

CVE-2004-2695

The CVE-2004-2695 entry describes an SQL injection in Jelsoft vBulletin 3.0–3.0.3, exploitable via the x_invoice_num parameter in subscriptions/authorize.php. This allows remote attackers to execute arbitrary SQL statements. The CVE entry notes a possible relation to CVE-2006-4267, which is indep...

CVE-2004-2702

CVE-2004-2702 is a cross-site scripting (XSS) vulnerability in SWsoft Plesk Reloaded's login_up.php3, exploitable via the login_name parameter. Affected are Plesk 7.0 and 7.1 Reloaded; root cause: failure to sanitize input to login_name. Impact: remote attacker can inject arbitrary script visible...

CVE-2004-2712

Gyach Enhanced (Gyach-E) prior to version 1.0.0-SneakPeek-3 is affected by a buffer overflow vulnerability that could be triggered by URL data, allowing remote attackers to cause a denial of service (crash). The description specifies an unspecified vector but identifies the affected product and v...

CVE-2004-2707

Technical details about CVE-2004-2707 are not provided in the supplied documents; no specifics on affected versions, impact, or exploitation are available here. Monitor for updates.

CVE-2004-2689

NewsPHP allows remote attackers to gain unauthorized administrative access by setting a cookie to the "autorized=admin; root=admin" value...

CVE-2004-2688

CVE-2004-2688 / CVE-2006-3358 describe multiple XSS vulnerabilities in NewsPHP’s index.php. The issue is triggered by unsanitized user input through the cat_id parameter (and other vectors in related CVEs), which can cause arbitrary web script/HTML to be injected and reflected in error pages. The...

CVE-2004-2690

CVE-2004-2690 concerns an unrestricted file upload vulnerability in the NewsPHP Administration Panel. The issue permits remote authenticated administrators to upload and execute arbitrary code instead of video files, indicating a flaw in how uploaded content is validated and handled by the panel....

CVE-2004-2694

CVE-2004-2694 affects Microsoft Outlook Express 6.0. The vulnerability allows remote attackers to bypass access restrictions and load content from arbitrary sources into the Outlook context via a BASE HREF with target set to _top, enabling phishing-like content injection. This is described across...

CVE-2004-2689

CVE-2004-2689 affects NewsPHP. The vulnerability allows remote attackers to gain unauthorized administrative access by setting a cookie to the value "autorized=admin; root=admin". The provided sources (NVD entry) indicate a HIGH impact with a CVSS v2 base score of 10.0, but no concrete remediatio...