CVE-2004-1896

This CVE affects Nullsoft Winamp versions 2.91 through 5.02, with a heap-based overflow in the in_mod.dll parser for Fasttracker 2 (.xm) mods. The vulnerability allows remote code execution via a malformed XM file, caused by a bound-check/heap-overflow condition in the XM/.MOD parsing path. The r...

CVE-2004-1807

CVE-2004-1807 describes a cross-site scripting (XSS) vulnerability in CFWebstore 5.0’s index.cfm that allows remote attackers to inject arbitrary script or HTML via the URL. The issue affects CFWebstore 5.0, with the root cause per the records being a client-side/script injection vulnerability in...

CVE-2004-1801

The provided details describe a directory traversal vulnerability in PWebServer 0.3.3 where an attacker can read arbitrary files by injecting .. (dot dot) in the URL. The root cause is insufficient input/path normalization allowing traversal outside the web root. Impact stated: potential exposure...

CVE-2004-1952

The CVE-2004-1952 entry describes a SQL injection vulnerability in Advanced Guestbook 2.2. The vulnerability affects the product’s password handling, allowing remote attackers to execute arbitrary SQL commands and gain privileges. CVSS v2 base score is 7.5 (HIGH) with network attack vector, low a...

CVE-2004-1783

CVE-2004-1783 refers to a directory traversal vulnerability in Net2Soft Flash FTP Server 1.0. Multiple connected sources (OpenVAS and RH/Red Hat metadata) confirm that a remote attacker can abuse a /.. path to read and create arbitrary files on affected systems, indicating potential impact on con...

CVE-2004-2056

Summary: CVE-2004-2056 is a SQL injection vulnerability in Nucleus CMS 3.01, affecting action.php via the itemid parameter. What is affected: Nucleus CMS 3.01 (action.php) — SQL injection via itemid. Root cause and impact (as stated): The vulnerability allows an attacker to execute arbitrary SQL ...

CVE-2004-1788

ASP-Nuke 1.3 and earlier stores user credentials under the web document root with insufficient access control. This allows remote attackers to obtain sensitive information via a direct request to main.mdb. The issue is described across multiple sources (NVD/Red Hat/CVE listings) as a vulnerabilit...

CVE-2004-2006

Affected software: Trend Micro OfficeScan 3.0–6.0. The vulnerability arises from default permissions of "Everyone Full Control" on the installation directory and registry keys, enabling local users to disable antivirus protection. No explicit exploit details or fixes are provided in the supplied ...

CVE-2004-1975

The CVE-2004-1975 issue affects paFileDB 3.1 and specifically the category module (pafiledb.php) . It is an XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the id parameter . The vulnerability is described as closely related to CVE-2004-1551. No further t...

CVE-2004-1880

Technical details about CVE-2004-1880 are not provided in the connected documents. The available entries reiterate the memory leak in OpenLDAP’s back-bdb backend for 2.1.12 and earlier. Monitor for updates.

CVE-2004-1939

CVE-2004-1939 affects Zaep AntiSpam 2.0. The vulnerability is a cross-site scripting (XSS) flaw in the key parameter, exploitable via double-encoded slashes (%252F). The NVD metrics show a base score of 4.3 (medium) with network attack vector, no confidentiality impact, partial integrity impact, ...

CVE-2004-1796

PHP remote file inclusion vulnerability in HotNews 0.7.2 and earlier allows remote attackers to execute arbitrary PHP code via the 1 configheader parameter to hotnews-engine.inc.php3 or 2 configincdir parameter to hnmain.inc.php3...

CVE-2004-2001

ifconfig "-arp" in SGI IRIX 6.5 through 6.5.22m does not properly disable ARP requests from being sent or received...

CVE-2004-1817

This CVE affects Php-Nuke 7.1.0, where a cross-site scripting (XSS) vulnerability exists in modules.php. The issue allows an attacker to inject arbitrary web script or HTML through user-supplied input in multiple fields: Your Name, e-mail, nicname, fname, ratenum, and search. The root cause is im...

CVE-2004-1842

Cross-site request forgery CSRF vulnerability in Php-Nuke 6.x through 7.1.0 allows remote attackers to gain administrative privileges via an img tag with a URL to admin.php...

CVE-2004-1876

The "%f" feature in the VirusEvent directive in Clam AntiVirus daemon clamd before 0.70 allows local users to execute arbitrary commands via shell metacharacters in a file name...

CVE-2004-2000

The vuln is in Php-Nuke (Downloads module) versions 6.x through 7.2, caused by an SQL injection in modules.php via the (1) orderby or (2) sid parameters. This allows remote attackers to modify/execute arbitrary SQL as described in CVE-2004-2000. No remediation or patch details are provided in the...

CVE-2004-1793

CVE-2004-1793 describes a stack-based buffer overflow in swnet.dll of YaSoft Switch Off (versions 2.3 and earlier). The vulnerability allows remote authenticated users to execute arbitrary code via a long message parameter in a SendMsg action to action.htm. Affected component: swnet.dll within Ya...

CVE-2004-2057

SQL injection vulnerability in ASPRunner 2.4 allows remote attackers to execute arbitrary SQL statements...

CVE-2004-1892

Summary: CVE-2004-1892 describes a stack-based buffer overflow in eMule’s DecodeBase16 function used by the IRC module and the Web Server in eMule 0.42d, allowing remote code execution via a long input string. The connected Nessus/OpenVAS entries confirm a DecodeBase16 overflow vulnerability in t...