CVE-2004-2063

CVE-2004-2063 is an XSS vulnerability in AntiBoard 0.7.2 and earlier, located in antiboard.php. The flaw allows remote attackers to inject arbitrary HTML or UWS script via the feedback parameter. The description refers to cross-site scripting as the vulnerability class, with the affected version ...

CVE-2004-1838

CVE-2004-1838 affects xweb 1.0 and describes a directory traversal vulnerability where a dot-dot sequence in the URL allows a remote attacker to download arbitrary files. The available documents state the impact as arbitrary file download but do not provide a stated root cause or remediation. No ...

CVE-2004-1787

CVE-2004-1787 affects PostCalendar 4.0.0 . The vulnerability is a SQL injection in search queries that allows remote attackers to execute arbitrary SQL commands. Root cause, as stated, is unvalidated/unsafely composed input in the search parameter leading to injection. The impact is described as ...

CVE-2004-2054

The CVE-2004-2054 issue affects phpBB versions 2.0.4 and 2.0.9, where a CRLF injection enables HTTP Response Splitting to alter server HTML content via the mode parameter in privmsg.php or the redirect parameter in login.php. OpenVAS notes additional context for phpBB

CVE-2004-1943

CVE-2004-1943 describes a PHP remote file inclusion in album_portal.php for phpBB modified by Przemo 1.8. The vulnerability allows remote attackers to execute arbitrary PHP code by supplying a crafted phpbb_root_path parameter. The details come from NVD/CVE records; no additional exploit, mitigat...

CVE-2004-1902

CVE-2004-1902 affects Citrix MetaFrame Password Manager 2.0. When a central credential store is not configured, passwords entered immediately after the First Time User Wizards are not encrypted, allowing local users to access sensitive information. Impact: partial confidentiality loss for credent...

CVE-2004-1871

PhotoPost PHP Pro 4.6.x and earlier are affected by multiple cross-site scripting (XSS) vulnerabilities. Exploitation targets showmembers.php via the parameters ppuser, password, stype, perpage, sort, page, si, cat, and also the photo/album name/description fields. Affected product/version: Photo...

CVE-2004-2030

CVE-2004-2030 describes multiple XSS vulnerabilities in Liferay’s index.jsp prior to version 2.2.0 (released 2004-10-01), where remote attackers could inject arbitrary web script or HTML by exploiting the message subject. The accompanying sources confirm the vulnerability class (XSS) and affected...

CVE-2004-1819

CVE-2004-1819 affects 4nalbum 0.92 running with PHP-Nuke 6.5–7.0. The issue is an information disclosure via a direct request to displaycategory.php, where an error message reveals the filesystem path. This results in partial confidentiality impact (information disclosure). The connected document...

CVE-2004-1994

FuseTalk 4.0 contains a vulnerability where remote attackers can ban other users by making a direct request to banning.cfm. The description confirms network-attack feasibility with partial availability impact but provides no specific exploit details, affected versions, root-cause analysis, or rem...

CVE-2004-1911

CVE-2004-1911 concerns an XSS vulnerability in AzDGDatingLite 2.1.1. The issue allows remote attackers to inject arbitrary web script or HTML via (1) l parameter (language) to index.php or (2) id parameter to view.php. The NVD entry cites a base score of 4.3 (Medium) with network attack vector, n...

CVE-2004-2037

CVE-2004-2037 describes a buffer overflow in Mollensoft Lightweight FTP Server 3.6. The flaw allows remote authenticated users to crash the server and potentially execute arbitrary code by sending a long CWD command (e.g., via an interactive FTP client). Documents identify the affected product an...

CVE-2004-1874

CVE-2004-1874 describes multiple XSS vulnerabilities in A-CART Pro and A-CART 2.0, specifically in the vulnerable components deliver.asp and billing.asp, allowing remote attackers to inject arbitrary web script or HTML via the user information forms. Connected documents confirm the affected produ...

CVE-2004-1805

The CVE-2004-1805 issue targets games using the Epic Games Unreal Engine 436, describing a format string vulnerability in class names that enables remote attackers to cause a denial of service and potentially execute arbitrary code. The vulnerability appears to be exploitable over the network, wi...

CVE-2004-1941

The CVE-2004-1941 entry concerns Fastream NETFile FTP/Web Server 6.5.1.980. The vulnerability is described as a remote denial of service that can be triggered by a login attempt using a username that does not exist. Details in connected documents confirm the affected product and the impact as a D...

CVE-2004-2002

Technical details for CVE-2004-2002 are not publicly available in the provided documents; no information on affected products, versions, root cause, or fix is present. Monitor for updates.

CVE-2004-1830

CVE-2004-1830 : The error.php in Error Manager 2.1 for PHP-Nuke 6.0 allows remote attackers to obtain sensitive information by supplying invalid (language, newlang, or lang) parameters, which leaks the pathname in a PHP error message. This is a information-disclosure issue affecting the specified...

CVE-2004-1935

CVE-2004-1935 describes a cross-site scripting (XSS) vulnerability in SCT Campus Pipeline where remote attackers can inject arbitrary web script or HTML via onload, onmouseover, and other Javascript events in an email attachment. The NVD metrics indicate the impact is limited to partial integrity...

CVE-2004-1860

CVE-2004-1860 concerns a buffer overflow in Check Point SmartDashboard for Check Point NG AI R54/R55. The overflow can be triggered by a large filter on a column when using SmartView Tracker, allowing remote authenticated users to cause a denial of service (server disconnect) and potentially exec...

CVE-2004-1816

Sun Java System Application Server 7.0 Update 2 and earlier is affected when a SOAP web service expects an array of objects as an argument, leading to denial of service through memory consumption. The provided sources confirm the vulnerability description but do not supply concrete exploit detail...