CVE-2004-1930

Technical details beyond the initial description are not provided in the connected documents. Monitor for updates and vendor advisories for any fixes or affected versions.

CVE-2004-1989

The CVE-2004-1989 entry affects Coppermine Photo Gallery 1.2.2b, where a vulnerability in theme.php allows a remote attacker to execute arbitrary PHP code by altering THEME_DIR to reference a URL containing user_list_info_box.inc. This is a PHP remote file inclusion flaw with network access, no a...

CVE-2004-2033

CVE-2004-2033 affects Orenosv 0.5.9f. The vulnerability allows remote attackers to cause a denial of service (crash) by sending a long HTTP GET request. Impact as stated: partial availability. Root cause/technical detail beyond this description is not provided in the connected documents. No remed...

CVE-2004-1779

CVE-2004-1779 describes a cross-site scripting (XSS) vulnerability in ThWboard’s board.php, affecting versions before beta 2.84. The issue is triggered via the lastvisited parameter, allowing remote attackers to inject arbitrary web script or HTML. The connected records confirm the affected compo...

CVE-2004-1810

The CVE-2004-1810 entry maps to a vulnerability in the Opera browser’s JavaScript engine (reported for Opera 7.x). The issue arises when handling very large JavaScript Array objects, where creating an Array with an extremely large size value and writing into it can crash the browser. OpenVAS and ...

CVE-2004-1960

Protector System 1.15b1 has a Cross‑Site Scripting (XSS) vulnerability in blocker_query.php that allows remote attackers to inject arbitrary web script or HTML via the (1) target or (2) portNum parameters. The CVE-2004-1960 entry notes a MEDIUM severity (CVSSv2 base 4.3) with Network attack vecto...

CVE-2004-1862

CVE-2004-1862 concerns multiple reflected XSS flaws in Extreme Messageboard (XMB) versions 1.8 SP3 and 1.9 beta. The vulnerabilities arise from unsafely echoed user-controlled input across several scripts: xmb.php (xmbuser), u2u.php (folder), stats.php (viewmost, replymost, latest), post.php (mes...

CVE-2004-1899

The CVE-2004-1899 entry applies to Monit’s administration interface, affecting versions 1.4 through 4.2. The issue is an off-by-one overflow triggered by a POST containing 1024 bytes, enabling remote attackers to exploit the vulnerability via the admin interface. The connected documents consisten...

CVE-2004-2044

CVE-2004-2044 affects PHP-Nuke 7.3 and related products that use the PHP-Nuke codebase (e.g., Nuke Cops betaNC bundle, OSCNukeLite 3.1, OSC2Nuke 7x). It arises from improper use of eregi() with $_SERVER['PHP_SELF'] to identify the calling script, enabling remote attackers to directly access scrip...

CVE-2004-1982

CVE-2004-1982 affects YaBB 1 Gold SP 1.2, where Post.pl allows remote attackers to modify records in the board’s .txt file by sending carriage return characters in the subject field. The available documents describe the vulnerability and impact as modification of board records, but do not provide...

CVE-2004-1908

The CVE-2004-1908 issue concerns McAfee FreeScan’s CoMcFreeScan ActiveX object. A design flaw in FreeScan’s scanning component allows remote attackers to obtain sensitive file-system information (via GetSpecialFolderLocation with certain parameters), and a second vulnerability can terminate appli...

CVE-2004-1879

CVE-2004-1879 describes a cross-site scripting (XSS) vulnerability in PHPKIT 1.6.03, allowing remote attackers to inject arbitrary web script or HTML through forum messages. The available documents do not specify the exact vector (stored vs reflected) or impact beyond the ability to execute scrip...

CVE-2004-2034

CVE-2004-2034 describes a buffer overflow in the WildTangent Web Driver 4.0, specifically in the WTHoster and WebDriver modules. The vulnerability allows remote attackers to execute arbitrary code via a long filename. The available connected documents confirm the affected software/components and ...

CVE-2004-1865

CVE-2004-1865 describes a cross-site scripting vulnerability in the administration panel of bBlog 0.7.2 . The issue allows remote authenticated users with superuser privileges to inject arbitrary web script or HTML via the blog name parameter ($blogname). The provided sources indicate the vulnera...

CVE-2004-1809

The CVE-2004-1809 issue affects phpBB 2.0.6d and earlier, where an XSS vulnerability exists in the web forum files ViewTopic.php and ViewForum.php. The underlying problem is that the (1) postdays parameter in viewtopic.php or (2) topicdays parameter in viewforum.php can be manipulated to inject a...

CVE-2004-1984

The CVE concerns Coppermine Photo Gallery versions 1.2.2b and 1.2.0 RC4. Affected files (phpinfo.php, addpic.php, config.php, db_input.php, displayecard.php, ecard.php, crop.inc.php) can disclose the full server path via a PHP error message when accessed directly, leaking information about the in...

CVE-2004-1895

CVE-2004-1895 affects YaST Online Update (YOU) in SuSE 8.2 and 9.0. The vulnerability enables local users to overwrite arbitrary files via a symlink attack on you-$USER/cookies, indicating a local, user-privilege escalation risk (no remote access). The available sources explicitly describe the is...

CVE-2004-1971

The CVE-2004-1971 entry concerns PHP-Nuke Video Gallery Module 0.1 Beta 5. a vulnerability where remote attackers can cause an error message by issuing HTTP requests with invalid catid or clipid parameters, causing disclosure of the full server path. Affected component: PHP-Nuke Video Gallery Mod...

CVE-2004-1782

Athena Web Registration (athenareg.php) is vulnerable to remote command execution via shell metacharacters in the pass parameter. Descriptions from CVE-2004-1782 and OpenVAS/Nessus reports confirm a remote-code-execution flaw in the Athena Web Registration server, allowing arbitrary commands to b...

CVE-2004-1972

CVE-2004-1972: SQL injection in PHP-Nuke Video Gallery Module 0.1 Beta 5 (modules.php) allows remote attackers to inject arbitrary SQL via clipid or catid parameters in viewclip, viewcat, or voteclip actions. Vulnerable component is the module’s handling of these parameters, enabling unauthorized...