CVE-2004-1813

The CVE-2004-1813 entry applies to VocalTec VGW4/8 Gateway versions around 8.0. It describes a remote authentication bypass vulnerability where an HTTP request to home.asp with a trailing slash can bypass login. CVSS v2 metrics indicate a base score of 7.5 (HIGH) with network access, low attack c...

CVE-2004-1847

News Manager Lite 2.5 is affected by an authentication bypass vulnerability where an attacker can set the ADMIN parameter in the NEWS_LOGIN cookie to gain administrator privileges. The CVE entry, NVD, and CVE record confirm this issue as a credential bypass affecting News Manager Lite 2.5; no roo...

CVE-2004-1841

CVE-2004-1841 concerns a SQL injection in MS Analysis module 2.0 for PHP-Nuke, allowing remote attackers to execute arbitrary SQL via the Referer header in an HTTP request. The available documents identify the affected component and the general vulnerability class but do not provide version-speci...

CVE-2004-1966

Open Bulletin Board (OpenBB) 1.0.6 and earlier contains multiple SQL injection flaws allowing remote SQL command execution via parameters: FID in board.php; sortorder, perpage, or id in member.php; forums in search.php; and PID or FID in post.php. Root cause is unvalidated input in these endpoint...

CVE-2004-2048

The CVE-2004-2048 entry concerns eSeSIX Thintune Thin Client devices. A radmin service starts a process on port 25072 in firmware 2.4.38 and earlier, which can be accessed using the default password “jstwo,” enabling remote attackers to gain complete access. Related OpenVAS data corroborates a ba...

CVE-2004-2039

CVE-2004-2039 affects e107 0.615. Remote attackers could trigger direct requests to specific PHP files (alt_news.php, backend_menu.php, clock_menu.php, counter_menu.php, login_menu.php, etc.) and cause PHP error messages that disclose the full server path, enabling information disclosure. The ava...

CVE-2004-1881

CVE-2004-1881 affects CactuShop 5.x. The SQL injection vulnerability occurs in mailorder.asp and payonline.asp, where the user-supplied strItems parameter is not filtered before use in an SQL query, allowing remote attackers to modify queries and potentially execute system commands (e.g., via xp_...

CVE-2004-1786

CVE-2004-1786 affects PortalApp and stems from insufficient access control that places user credentials under the web root. The vulnerability enables remote attackers to access sensitive information by directly requesting 8275.mdb. Connected sources confirm this exposure but do not document a pat...

CVE-2004-1947

The CVE-2004-1947 entry concerns the AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online. The vulnerability allows remote attackers to (1) obtain sensitive information such as system drives and contents or (2) use the RequestFile method to download and execute arbitrary c...

CVE-2004-1784

CVE-2004-1784 concerns Webcam Watchdog 3.63. The web server component is vulnerable to a buffer overflow triggered by a long HTTP GET request, enabling remote code execution. The advisory notes a high severity (CVSSv2 7.5) with network access, no authentication required, and partial impacts on co...

CVE-2004-1891

The vulnerability concerns SGI IRIX 6.5.20 ftpd’s ftp_syslog function. Affected component: ftp_syslog in the ftpd daemon; likely logging-related issue when handling anonymous FTP. Underlying cause is not clearly described in the provided documents. Reported impact is unknown; it is suggested that...

CVE-2004-1858

HP Web Jetadmin 7.5.2546 is affected by CVE-2004-1858, where remote attackers can cause a denial of service (crash) through a malformed request, attributed to a likely stricmp() misuse involving the "$" character. The available documents identify the affected product and the general impact but do...

CVE-2004-2051

The CVE-2004-2051 entry affects eSeSIX Thintune thin clients (Phoenix browser) running firmware 2.4.38 and earlier. The issue allows local users to read arbitrary files via a file:/// URL, as described in the CVE description. Related OpenVAS data also references multiple vulnerabilities in Thintu...

CVE-2004-2060

ASPrunner 2.4 stores the database under the web root in the db/ directory, which may allow remote attackers to retrieve the database by directly requesting the database file. The vulnerability is tied to predictable database filenames based on table and field names. Affected product: ASPrunner (2...

CVE-2004-2031

The CVE-2004-2031 entry concerns the e107 CMS: a Cross-site Scripting (XSS) vulnerability in the file user.php that allows remote attackers to inject arbitrary web script or HTML via the (1) URL, (2) MSN, or (3) AIM fields. The recorded impact is partial integrity compromise with no confidentiali...

CVE-2004-2019

The CVE-2004-2019 entry concerns the WebLinks module of Php-Nuke 6.x–7.3. The vulnerability arises from an invalid show parameter in the WebLinks module, which allows remote attackers to obtain sensitive information by triggering a PHP error that reveals the full filesystem path. Affected softwar...

CVE-2004-1987

The CVE-2004-1987 vulnerability affects Coppermine Photo Gallery versions 1.2.2b and 1.2.0 RC4. It permits remote attackers with administrative privileges to execute arbitrary commands through shell metacharacters in the configuration parameters $CONFIG['impath'] or $CONFIG['jpeg_qual']. The conn...

CVE-2004-1876

The CVE-2004-1876 issue affects ClamAV's clamd (VirusEvent directive) prior to version 0.70. The vulnerability arises from using the "%f" parameter to substitute the file name, allowing a local user to trigger shell metacharacters and execute arbitrary commands with privileges of the antivirus pr...

CVE-2004-1993

The CVE-2004-1993 issue affects omail webmail 0.98.5 and stems from an incomplete patch to the checklogin function in omail.pl, which allows remote attackers to run arbitrary commands via shell metacharacters such as backticks in the password. NVD lists a CVSS2 base score of 10.0 (NETWORK, LOW co...

CVE-2004-1962

The CVE-2004-1962 entry concerns Protector System 1.15b1 (index.php) with a vulnerability where an attacker could bypass SQL injection filters by sending "/**/" sequences in targeted fields. The issue is a SQL injection in the web application component, enabling potentially partial disclosure and...