CVE-2004-2218

SQL injection vulnerability in PHPMyWebHosting, affecting 0.3.4 and earlier, via pmwh.php, where the password parameter allows remote attackers to modify SQL statements. Connected sources also describe exploitation via malformed login input (username) enabling arbitrary SQL execution against the ...

CVE-2004-2257

phpMyFAQ 1.4.0 allows remote attackers to access the Image Manager to upload or delete images without authorization via a direct request...

CVE-2004-2242

Phorum contains a cross-site scripting vulnerability in search.php, exploitable via the subject parameter, potentially affecting Phorum 5.0.7 beta and earlier. The issue allows remote attackers to inject arbitrary HTML/JS. The public records describe the vulnerability but do not provide a concret...

CVE-2004-2228

CVE-2004-2228 affects Mozilla Firefox prior to 1.0 on Mac OS X, where the browser was installed with world-writable permissions, enabling local users to gain privileges. The issue is documented across multiple feeds (NVD/NVD-derived and Gentoo GLSA references). Remediation guidance present in con...

CVE-2004-2239

CVE-2004-2239 corresponds to a buffer overflow in vsybase.c of vpopmail

CVE-2004-2219

The CVE-2004-2219 issue affects Microsoft Internet Explorer, specifically IE6, with a vulnerability in the address bar update method. CPAI-2015-1219 attributes the root cause to incorrect handling of unknown protocol handlers, enabling a sequence of steps in IE to make attacker-supplied content a...

CVE-2004-2224

CVE-2004-2224 affects Appfoundry Message Foundry 2.75 .0003. The issue allows a remote attacker to cause a denial of service (crash) by sending an HTTP GET request that contains MS-DOS device names (e.g., com1). The available documents do not specify root cause details beyond this description, no...

CVE-2004-2249

Technical details about CVE-2004-2249 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2004-2215

The CVE-2004-2215 entry concerns RXVT-Unicode 3.4 and 3.5, where file descriptors are not properly closed. This allows local users to access other users’ terminals and potentially gain privileges. The connected sources confirm the affected software and the underlying issue (incomplete fd cleanup)...

CVE-2004-2233

Unknown "front page vulnerability with Moodle servers" for Moodle before 1.3.2 has unknown impact and attack vectors...

CVE-2004-2250

Technical details about CVE-2004-2250 are not publicly available in the provided documents. Monitor for updates.

CVE-2004-2221

CVE-2004-2221 describes a buffer overflow in the SoftCart.exe CGI of Mercantec SoftCart 4.00b. The vulnerability allows remote attackers to execute arbitrary code by sending a long parameter in an HTTP GET request. Public references show Metasploit and Exploit-DB demonstrations of an exploit for ...

CVE-2004-2240

Phorum 5.0.11 and earlier contains multiple SQL injection vulnerabilities. Specifically, remote attackers can modify SQL statements via (1) the query string in read.php or (2) unknown vectors in file.php. The connected sources confirm the affected product/version and the injection paths, but do n...

CVE-2004-2243

CVE-2004-2243 affects Phorum where remote attackers can hijack other users’ sessions by stealing and replaying the session hash in the phorum_uriauth parameter (demonstrated via profile.php). The note says the affected version was reported as 4.3.7, but this may be erroneous. No explicit remediat...

CVE-2004-2235

Technical details are not publicly available in the provided documents. Monitor for updates from official sources; no specifics on affected Moodle versions or root cause are given here.

CVE-2004-2234

CVE-2004-2234 concerns Moodle before 1.2, where teachers could log in as administrators due to an unspecified vulnerability (privilege escalation). Connected sources consistently reference Moodle

CVE-2004-2257

CVE-2004-2257 affects phpMyFAQ 1.4.0, where remote attackers can access the Image Manager and upload or delete images without authorization via a direct request. The connected sources corroborate an authentication bypass exposing image management functionality, with practical impact described as ...

CVE-2004-2237

Technical details for CVE-2004-2237 are not publicly available in the provided documents. Monitor for updates and expect future disclosures before any assessment of impact or remediation.

CVE-2004-2223

FsPHPGallery before 1.2 is vulnerable to remote DoS: processing an image with a large size attribute crashes the server during resize. Affected product: FsPHPGallery. Root cause: server-side image resize handling overflow/large size attribute. No exploit details provided in the documents. No reme...

CVE-2004-2246

CVE-2004-2246 involves a cross-site scripting (XSS) vulnerability in Goollery prior to 0.04b. The issue is exploitable via the conversation_id parameter to viewpic.php, allowing remote attackers to inject arbitrary HTML or script into a user’s browser session. The available connected sources conf...