CVE-2004-1888

display.cgi in Aborior Encore WebForum allows remote to execute arbitrary commands via shell metacharacters in the file variable...

CVE-2004-1816

Sun Java System Application Server 7.0 Update 2 and earlier is affected when a SOAP web service expects an array of objects as an argument, leading to denial of service through memory consumption. The provided sources confirm the vulnerability description but do not supply concrete exploit detail...

CVE-2004-1898

Monit vulnerability CVE-2004-1898: stack-based buffer overflow in the administration interface affecting Monit 1.4–4.2. Remote attackers can cause arbitrary code execution via a long username.

CVE-2004-1917

Format string vulnerability in testfuncfunc in LCDProc 0.4.1 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the str variable...

CVE-2004-2025

Zen Cart 1.1.3 is affected by a SQL injection in application_top.php (before patch 2) that can be exploited via the products_id parameter to execute arbitrary SQL on the backend. The vulnerability is remote, with impact on confidentiality/integrity/availability as stated, allowing attackers to ru...

CVE-2004-1888

CVE-2004-1888 affects Aborior Encore WebForum: the display.cgi component allows remote command execution through shell metacharacters in the file parameter. The vulnerability is network‑level with no authentication required per the description, enabling an attacker to run arbitrary commands with ...

CVE-2004-1907

The vulnerability CVE-2004-1907 affects Kerio Personal Firewall (KPF) 4.0.13, where the Web Filtering functionality can be triggered to crash a remote system by receiving hex-encoded URLs containing %13%12%13. This results in a denial-of-service condition. The available data do not specify an off...

CVE-2004-1909

The CVE-2004-1909 instance concerns ClamAV (0.68 and earlier) where processing certain RAR archives, such as those created by Beagle/Bagle variants, can crash the clamav process leading to a denial of service. Public references in Gentoo GLSA-200404-07 confirm the remote impact vector (RAR archiv...

CVE-2004-1884

CVE-2004-1884 affects Ipswitch WS_FTP Server 4.0.2. The vulnerability is a backdoor: the XXSESS_MGRYY user with a default password can enable remote access, enabling partial confidentiality/integrity/availability impact as indicated by CVSS base vector AV:N/AC:L/Au:N/C:P/I:P/A:P. Public reference...

CVE-2004-2053

This CVE concerns EasyIns Stadtportal 4, where a PHP remote file inclusion vulnerability exists in index.php, exploitable via the site parameter. The underlying issue is improper handling of the site input, allowing an attacker to cause arbitrary PHP code execution. Impact is described as partial...

CVE-2004-1939

CVE-2004-1939 affects Zaep AntiSpam 2.0. The vulnerability is a cross-site scripting (XSS) flaw in the key parameter, exploitable via double-encoded slashes (%252F). The NVD metrics show a base score of 4.3 (medium) with network attack vector, no confidentiality impact, partial integrity impact, ...

CVE-2004-2050

CVE-2004-2050 concerns eSeSIX Thintune Thin Client firmware 2.4.38 and earlier. Local users can gain privileges by pressing CTRL-SHIFT-ALT-DEL and entering the hard-coded password maertsJ in lshell, enabling a local privilege escalation. OpenVAS notes a backdoor password (jstwo) in Thintune, indi...

CVE-2004-1932

This CVE (CVE-2004-1932) affects PHP-Nuke 6.x through 7.2, with a SQL injection in auth.php and admin.php. The underlying flaw allows remote attackers to inject SQL and create an administrator account via base64-encoded SQL in the admin parameter. The connected sources confirm the vulnerable comp...

CVE-2004-1988

The CVE-2004-1988 entry documents a PHP remote file inclusion in Coppermine Photo Gallery 1.2.0 RC4. The vulnerability arises when the CPG_M_DIR setting is manipulated to reference a URL on a remote server that serves functions.inc.php, allowing an attacker to execute arbitrary PHP code on the af...

CVE-2004-1832

CVE-2004-1832 : Affects Mac OS X Server 10.3, specifically the GUI admin service. The issue is a buffer overflow triggered by a large amount of data sent to TCP port 660, resulting in a denial of service (crash and restart). Exploitation details are not provided in the connected documents. No rem...

CVE-2004-1910

The CVE-2004-1910 entry concerns rufsi.dll in Symantec Virus Detection. A remote attacker can cause a denial of service (crash) by supplying a long string to the GetPrivateProfileString function. The issue was originally reported as a buffer overflow, but that claim is disputed by the vendor, tho...

CVE-2004-1981

Technical details about CVE-2004-1981 are not publicly available in the provided documents. Monitor for updates.

CVE-2004-1918

CVE-2004-1918 affects RSniff 1.0. The vulnerability allows a remote attacker to exhaust a target’s resources by opening a large number of connections with a command other than AUTHENTICATE (or with no data), preventing the socket from closing properly. The available documents confirm the affected...

CVE-2004-1878

LINBOX LIN:BOX is affected by CVE-2004-1878, where remote attackers can bypass authentication and access sensitive information by sending a direct request to admin/user.pl with a double leading slash (//). The NVD entry indicates a NETWORK attack vector, low complexity, no authentication required...

CVE-2004-1992

CVE-2004-1992 affects Serv-U FTP Server prior to 5.0.0.6. The root cause is a buffer overflow caused by incorrect validation of FTP LIST/NLST parameters (specifically a long -l parameter), leading to an out-of-bounds read and remote denial of service. Affected versions include 5.0.0.4 and earlier...