CVE-2004-2591

The CVE-2004-2591 issue affects ButtUglySoftware CleanCache 2.19. The vulnerability arises from the data-overwrite capability not properly overwriting data in files, allowing recovery of previously stored data. According to the records, the impact is partial confidentiality with a local attack ve...

CVE-2004-2592

The CVE-2004-2592 issue affects the Quake II server before R1Q2, used in multiple products. It allows a remote attacker to trigger a denial of service (server/application crash) by a modified client that requests data stored at a negative array offset during processing of Configstrings and Baseli...

CVE-2004-2597

Technical details about CVE-2004-2597 are not publicly available in the provided connected documents. No specific affected products/versions or remediation are stated here. Monitor for updates.

CVE-2004-2594

CVE-2004-2594 affects the Quake II server on Windows prior to R1Q2. The vulnerability is an absolute path traversal in the server’s file access, allowing a remote attacker to read arbitrary files by including a "/" sequence in a pathname (example: download /server.cfg). The CVSS data indicates ne...

CVE-2004-2603

CVE-2004-2603 is an XSS vulnerability in the Search module of UberTec Help Center Live (HCL). The flaw allows remote attackers to inject arbitrary web script or HTML via the find parameter to index.php. This description is supported by multiple sources in the connected documents referencing the s...

CVE-2004-2602

CVE-2004-2602 affects UberTec Help Center Live (HCL) prior to 1.2.7. It describes a PHP remote file inclusion vulnerability that allows an attacker to execute arbitrary PHP code by passing a URL in the HCL_path parameter to pipe.php. The vulnerability arises from unsafely including user-supplied ...

CVE-2004-2601

UberTec Help Center Live (HCL) is affected by a PHP remote file inclusion vulnerability (CVE-2004-2601). The issue arises from the SKIN_inner parameter in inc/skin.php, which can be manipulated via a URL to read local files and potentially execute PHP code on the server. Impact, per sources, is r...

CVE-2004-2604

CVE-2004-2604 affects PHProxy’s index.php: XSS vulnerability exploitable via the error parameter that allows remote injection of arbitrary web script/HTML. The issue is documented across multiple sources (NVD, CVE lists, OSVDB/SecurityFocus references) with a base score of 4.3 (Medium) per NVD CV...

Randshop all versiyon Sql İnjection

Randshop all versiyon Sql njection Website:http://www.randshop.com Demo:http://www.randshop.com/demoshop/ ------------------------------------------------------------------- Credit:Liz0ziM & wannacut Mail:[email protected] www.biyo.tk...

CVE-2004-2585

The CVE-2004-2585 entry affects SmarterTools SmarterMail 1.6.1511 and 1.6.1529, where the XSS flaw occurs in frmCompose.aspx, allowing remote attackers to inject arbitrary script/HTML via Javascript in the compose area's “check spelling” feature. The vulnerability arises from how user-supplied in...

CVE-2004-2585

Cross-site scripting XSS vulnerability in frmCompose.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to inject arbitrary web script or HTML via Javascript to the "check spelling" feature in the compose area...

CVE-2004-2581

Technical details about CVE-2004-2581 are not publicly available in the provided documents. No concrete affected products, versions, or remediation are described here. Monitor for updates from official sources.

CVE-2004-2589

CVE-2004-2589 affects the Gaim client prior to version 0.82. A remote attacker can cause a denial of service (application crash) by sending a long HTTP Content-Length header, leading Gaim to abort while allocating memory. The published data indicate an impact on availability (partial), with netwo...

CVE-2004-2579

The CVE-2004-2579 entry concerns Novell iChain 2.3. It describes an access-control bypass in an ACLCHECK module caused by an attack vector using a string with overlong UTF-8 encoding that bypasses rules for an unspecified component. CVSS metrics indicate network access, low complexity, and partia...

CVE-2004-2580

Technical details for CVE-2004-2580 are not publicly provided in the connected documents. The vulnerability description exists, but there are no concrete technical specifics (affected product versions, exploit vectors, or remediation) in the supplied material. Monitor for updates.

CVE-2004-2578

PhpGroupWare before 0.9.16.002 transmits the (1) admin header and (2) setup passwords in plaintext via cookies, allowing remote attackers to sniff passwords over the network. The issue is documented with CVSS v2 base score 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N). Concrete affected product/component: Php...

CVE-2004-2576

CVE-2004-2576 affects phpGroupWare 0.9.16.000; the component class.vfs_dav.inc.php fails to create .htaccess files to enable authorization checks for access to users’ home-directory files. This leads to potential disclosure of sensitive information by remote attackers. The NVD entry lists CVSS v2...

CVE-2004-2574

CVE-2004-2574 affects PhpGroupWare up to version 0.9.14.005 (and earlier). The vulnerability is a cross-site scripting (XSS) flaw in index.php where the date parameter in calendar.uicalendar.planner menuaction can be manipulated to inject arbitrary web script or HTML. Multiple connected sources (...

CVE-2004-2583

The CVE-2004-2583 entry describes a denial-of-service condition in SmarterTools SmarterMail (versions 1.6.1511 and 1.6.1529) where remote attackers can cause high CPU usage by opening a large number of simultaneous connections to TCP port 25. The available sources confirm the affected product and...

CVE-2004-2575

CVE-2004-2575 affects phpGroupWare 0.9.14.005 and earlier. The flaw allows remote attackers to disclose sensitive information by requesting certain files (hook_admin.inc.php, hook_home.inc.php, class.holidaycalc.inc.php, setup.inc.php.sample), which causes an error message revealing the path. The...