CVE-2004-2640

The CVE describes a directory traversal flaw in LinuxStat prior to 2.3.1, affecting the lstat.cgi component. An attacker can read arbitrary files by supplying (1) dot-dot sequences or (2) absolute paths to the template parameter, enabling unauthorized file access via remote input. The available d...

CVE-2004-2647

CVE-2004-2647 concerns Free Web Chat 2.0, where remote attackers can cause a denial of service by opening multiple connections from the same user, leading to CPU consumption and partial availability impact. The available records identify the affected product as Free Web Chat 2.0 and describe the ...

CVE-2004-2622

CVE-2004-2622 affects Altiris Deployment Solution 6.x and 5.x. AClient.exe does not require authentication from the first Deployment Server it connects to, enabling remote malicious servers to gain administrator access. Impact is complete administrator-level access on affected systems. The provid...

CVE-2004-2619

CVE-2004-2619 affects ripMIME up to version 1.3.2.3, where a base64 MIME encoded attachment containing invalid characters may bypass email protection due to improper extraction. The vulnerability enables remote attackers to influence processing of base64 content in email attachments (attack vecto...

CVE-2004-2630

The MIME transformation system transformations/textplainexternal.inc.php in phpMyAdmin 2.5.0 up to 2.6.0-pl1 allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors...

CVE-2004-2616

The CVE-2004-2616 entry concerns the file server in ActivePost Standard 3.1 and earlier. Affected software : ActivePost Standard (versions up to 3.1). Vulnerability : remote authenticated users can upload a file and obtain sensitive information; a success message reveals the path, indicating info...

CVE-2004-2610

CVE-2004-2610 affects mntd. The issue is in mntd_mount.c in mntd before 0.4.2, where local users may gain privileges via shell metacharacters in a remount option within the configuration file. The underlying cause is the handling of shell metacharacters in the remount option, enabling elevation o...

CVE-2004-2611

Technical details about CVE-2004-2611 are not publicly available in the provided connected documents; monitor for updates.

CVE-2004-2612

CVE-2004-2612 affects BNC IRC proxy (version 2.9.0). The flaw allows remote attackers to access functionality intended for authorized users by providing an incorrect password, effectively bypassing authentication. The vulnerability is documented with high risk (CVSS-like metrics in cited records)...

CVE-2004-2613

The CVE-2004-2613 entry concerns an unspecified vulnerability in procfs for Linux-VServer on the 2.4 kernel (stable branch < 1.23; development branch

CVE-2004-2609

CVE-2004-2609 affects the stuffit.com executable used by Symantec PowerQuest DeployCenter 5.5 boot disks. Local attackers could obtain an unencrypted Windows domain password by triggering four  stuffit /f:stuffit.dat invocations, potentially due to a buffer overflow. No remediation details are p...

CVE-2004-2618

Pegasi Web Server (PWS) 0.2.2 is affected by a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the URI, directly after the initial '/'. The issue is tied to the URI path component and is documented across CVE-2004-2618/NVD; no speci...

CVE-2005-3965

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-2607. Reason: This candidate is a duplicate of CVE-2004-2607. Notes: All CVE users should reference CVE-2004-2607 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2005-3965

CVE-2005-3965 is marked as a duplicate of CVE-2004-2607 (Rejected reason in description). Connected documents confirm CVE-2004-2607 exists and describes a numeric casting discrepancy in sdla_xfer for Linux kernels (2.6.x up to 2.6.5 and 2.4 up to 2.4.29-rc1) that can allow local users to read ker...

randshopSQL.txt

Randshop all versiyon Sql İnjection Website:http://www.randshop.com Demo:http://www.randshop.com/demoshop/ ------------------------------------------------------------------- Credit:Liz0ziM & wannacut Mail:[email protected] www.biyo.tk...

CVE-2004-2593

CVE-2004-2593 concerns the Quake II server (before R1Q2) with a buffer overflow in command-packet processing triggered by a long cmd_args buffer. The flaw allows remote attackers to crash the server and, potentially, execute arbitrary code over the network. The published CVSS vector is AV:N/AC:L/...

CVE-2004-2599

CVE-2004-2599 affects the Quake II server prior to R1Q2. The issue is described as multiple buffer overflows in the server, allowing local users to crash the application via the server console or rcon (denial of service). The connected documents provide the affected product and vulnerability clas...

CVE-2004-2592

The CVE-2004-2592 issue affects the Quake II server before R1Q2, used in multiple products. It allows a remote attacker to trigger a denial of service (server/application crash) by a modified client that requests data stored at a negative array offset during processing of Configstrings and Baseli...

CVE-2004-2596

Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service exhaustion of connection slots via a large number of connections from the same IP address...

CVE-2004-2598

Affected software : Quake II server before R1Q2 (as used in multiple products). Vulnerability details : Remote attackers can corrupt the server’s client state data structure by exiting a session without a valid disconnect command and then reconnecting. This may prevent a mod from being notified o...