CVE-2004-2210

Technical details about CVE-2004-2210 are not publicly available in the provided Connected documents. Monitor for updates from vendors and security advisories.

CVE-2004-2193

The CVE-2004-2193 issue affects CJOverkill’s trade.php (versions older than 4.0.4) with a cross-site scripting (XSS) vulnerability. The flaw arises from insufficient sanitization of user-supplied input, enabling remote attackers to inject script via the tms[0] or url parameters. OpenVAS entries c...

CVE-2004-2158

SQL injection vulnerability in Serendipity 0.7-beta1 allows remote attackers to execute arbitrary SQL commands via the entryid parameter to 1 exit.php or 2 comment.php...

CVE-2004-2171

Cross-site scripting XSS vulnerability in Cherokee before 0.4.8 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly quoted in the resulting error page...

CVE-2004-2192

SQL injection vulnerability in tttadmin/settings.php in Turbo Traffic Trader PHP 1.0 allows remote attackers to execute arbitrary SQL commands via the tttadmin parameter...

CVE-2004-2175

The CVE-2004-2175 entry corresponds to SQL injection flaws in ReviewPost PHP Pro. Affected: ReviewPost PHP Pro web app; vulnerable in showproduct.php (product param) and showcat.php (cat param). Cause: unsanitized user input used in database queries. Impact: potential data disclosure and, per Ope...

CVE-2004-2205

Technical details about CVE-2004-2205 are not available in the provided documents; no affected products, root cause, or remediation are disclosed here. Monitor for updates.

CVE-2004-2182

CVE-2004-2182 (Macromedia JRun 4.0) describes a session fixation vulnerability where remote attackers can hijack user sessions by pre-setting the session ID information used by the session server. Public sources in the provided documents consistently identify JRun 4.0 as affected and cite the vul...

CVE-2004-2172

EarlyImpact ProductCart is affected by a vulnerability where passwords are encrypted with a weak scheme, enabling remote attackers to obtain passwords through a chosen-plaintext attack. Affected versions are not clearly specified in the provided documents. The available sources do not indicate a ...

CVE-2004-2187

Technical details are not publicly available in the provided documents for CVE-2004-2187; the description remains generic (MediaWiki 1.3.5 and filename validation) with unknown impact vectors. Monitor for updates as more information becomes available.

CVE-2004-2156

Technical details for CVE-2004-2156 are not publicly available in the supplied documents; no specific affected product versions, root cause, or remediation are provided. Monitor for updates.

CVE-2004-2171

CVE-2004-2171 concerns the Cherokee web server. Multiple sources confirm a cross-site scripting (XSS) vulnerability in Cherokee before 0.4.8 , exploitable via the URL due to improper quoting in error pages. Affected software is Cherokee (pre-0.4.8); impact is ability for remote attackers to injec...

CVE-2004-2159

Technical details about CVE-2004-2159 are not publicly provided in the supplied documents; monitor for updates.

CVE-2004-2154

CVE-2004-2154 affects CUPS prior to 1.1.21rc1, where a Location directive in cupsd.conf is treated as case sensitive. This allows bypassing ACLs by using a printer name whose capitalization differs from that in the directive, enabling unauthorized access to printers. The issue is propagated acros...

CVE-2004-2150

The CVE-2004-2150 entry concerns Nettica Corporation INTELLIPEER Email Server 1.01, which discloses account validity through differing error messages. Related sources (PT-2004-3045 and Nessus entries) describe remote authentication attempts revealing whether an account exists, enabling user enume...

CVE-2004-2148

Technical details (affected product/component, vulnerability type, impact, exploit vectors) are not provided in the supplied documents. Monitor for updates from NVD/CVE records and related advisories.

CVE-2004-2153

Technical details for CVE-2004-2153 are not publicly provided in the supplied documents. No specifics on affected product/version, root cause, impact, or remediation are available here; monitor for updates.

CVE-2004-2144

Baal Smart Forms pre-3.2 allows remote attackers to bypass authentication and gain system access via a direct request to regadmin.php. The issue is documented across multiple sources (CVE listing and PT Security advisory) and affects versions prior to 3.2. Remediation recommended: upgrade to Baal...

CVE-2004-2149

CVE-2004-2149 describes a buffer overflow in the prepared statements API of libmysqlclient used by MySQL 4.1.3 beta and 4.1.4. The flaw allows remote denial of service when processing a large number of placeholders. Public references imply the issue exists in older 4.1.x series and could crash th...

CVE-2004-2152

CVE-2004-2152 affects MediaWiki up to version 1.3.4 in the raw page output mode, enabling cross-site scripting (XSS) by injecting arbitrary script/HTML. The root cause is a vulnerability in how the raw output is handled, permitting remote script execution through crafted content. Public reference...