CVE-2004-2586

CVE-2004-2586 applies to SmarterTools SmarterMail 1.6.1511 and 1.6.1529, where a directory traversal flaw in frmGetAttachment.aspx allows remote attackers to read arbitrary files via the filename parameter. Root cause: insufficient input validation leading to path traversal. The available sources...

CVE-2004-2582

The vulnerability CVE-2004-2582 affects Novell iChain 2.3. The issue is that the proxy server’s HTTP VIA header line reveals the build number, enabling remote attackers to obtain sensitive information. The available documents confirm the affected product and the root cause (build number disclosur...

CVE-2004-2588

The CVE-2004-2588 entry describes an information-leak flaw in phpinfo.php within XMB (Extreme Message Board) version 1.9 beta (Nexus beta). The vulnerability allows remote attackers to obtain sensitive information such as web server and PHP configuration details. The available sources (NVD/CVE re...

CVE-2004-2587

Vulnerability summary for CVE-2004-2587: SmarterTools SmarterMail versions 1.6.1511 and 1.6.1529 are affected. The issue lies in login.aspx, where a long txtusername parameter can be used by a remote attacker to cause a denial of service (potentially via a buffer overflow).Impact is limited to av...

CVE-2004-2590

CVE-2004-2590 affects meindlSOFT Cute PHP Library (cphplib) version 0.46. The vulnerability is described as related to regular expressions with unspecified impact and attack vectors. NVD lists a high-severity network-exposed issue (CVSSv2 base score 10.0) with complete impact on confidentiality, ...

CVE-2004-2573

CVE-2004-2573: PHP remote file inclusion in phpGroupWare 0.9.14.005 and earlier. The flaw is in tables_update.inc.php, allowing an attacker to execute arbitrary PHP code by supplying an external URL in the appdir parameter. Affected: phpGroupWare versions up to and including 0.9.14.005. Root caus...

WebSTAR FTP Server USER Overflow

This module exploits a stack buffer overflow in the logging routine of the WebSTAR FTP server. Reliable code execution is obtained by a series of hops through the System library. This module requires Metasploit: https://metasploit.com/download Current source:...

[Full-disclosure] [SECURITY] [DSA 907-1] New ipmenu packages fix insecure temporary file creation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 907-1 [email protected] http://www.debian.org/security/ Martin Schulze November 23rd, 2005 http://www.debian.org/security/faq -...

CVE-2004-2568

CVE-2004-2568 concerns multiple cross-site scripting (XSS) flaws in ReciPants 1.1.1. The issue arises from insufficient input sanitization in fields such as user id, recipe id, category id and other ID numbers, enabling remote script/HTML injection. The connected Red Hat and CVE records confirm t...

CVE-2004-2561

CVE-2004-2561 affects Internet Software Sciences Web+Center 4.0.1 and involves multiple SQL injection vulnerabilities. The issue allows remote attackers to execute arbitrary SQL commands via cookies (ISS_TECH_CENTER_LOGIN in search.asp and cookies in DoCustomerOptions.asp). The connected records ...

CVE-2004-2559

DokuWiki before 2004-10-19 allows remote attackers to access administrative functionality including 1 Mediaselectiondialog, 2 Recent changes, 3 feed, and 4 search, possibly due to the lack of ACL checks...

CVE-2004-2569

CVE-2004-2569 affects ipmenu prior to 0.0.3-5 for Debian GNU/Linux; it allows a local user to overwrite arbitrary files by creating a symlink to ipmenu.log. Debian’s DSA-907-1 fixes this by upgrading ipmenu to a safe version (0.0.3-5). Impact is local, with no remote vector described; no exploita...

CVE-2004-2562

CVE-2004-2562 describes an SQL injection in Leigh Business Enterprises (LBE) Web Helpdesk’s jobedit.asp via the id parameter. Affected versions are prior to 4.0.0.81. The root cause is improper handling of the id parameter, enabling remote execution of arbitrary SQL commands (impacting confidenti...

CVE-2004-2571

EnderUNIX isoqlog 2.1.1 is affected by multiple buffer overflow defects allowing remote code execution via Parser.c functions: parseQmailFromBytesLine, parseQmailToRemoteLine, parseQmailToLocalLine, parseSendmailFromBytesLine, parseSendmailToLine, parseEximFromBytesLine, and parseEximToLine; and ...

CVE-2004-2560

DokuWiki prior to 2004-10-19 is vulnerable when hosted on a web server that executes code based on file extension. A remote attacker can upload a file with an executable extension (e.g., ".php" or ".cgi"), enabling arbitrary code execution. The available sources describe the vulnerability but do ...

CVE-2004-2562

SQL injection vulnerability in jobedit.asp in Leigh Business Enterprises LBE Web Helpdesk before 4.0.0.81 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2004-2567

CVE-2004-2567 affects ReciPants 1.1.1 and describes multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via the (1) user id, (2) recipe id, (3) category id, and (4) other ID number fields. This is supported by multiple sources (NVD and CVE records)...

CVE-2004-2569

ipmenu 0.0.3 before Debian GNU/Linux ipmenu0.0.3-5 allows local users to overwrite arbitrary files via a symlink attack on the ipmenu.log temporary file...

CVE-2004-2565

The CVE-2004-2565 issue affects Sambar Server 6.1 Beta 2 on Windows (and possibly other versions on Linux). The root cause is directory traversal in two vectors: (1) a ".." sequence in the file parameter to showini.asp, and (2) an absolute path with a drive letter in the log parameter to showlog....

CVE-2004-2559

CVE-2004-2559 affects DokuWiki prior to 2004-10-19. The issue allows remote attackers to access administrative functions (Mediaselectiondialog, Recent changes, feed, search) due to missing ACL checks. This can impact confidentiality, integrity, and availability as reflected by CVSS metrics (AV:N/...