CVE-2004-1993

The CVE-2004-1993 issue affects omail webmail 0.98.5 and stems from an incomplete patch to the checklogin function in omail.pl, which allows remote attackers to run arbitrary commands via shell metacharacters such as backticks in the password. NVD lists a CVSS2 base score of 10.0 (NETWORK, LOW co...

CVE-2004-1962

The CVE-2004-1962 entry concerns Protector System 1.15b1 (index.php) with a vulnerability where an attacker could bypass SQL injection filters by sending "/**/" sequences in targeted fields. The issue is a SQL injection in the web application component, enabling potentially partial disclosure and...

CVE-2004-1861

CVE-2004-1861 relates to Invision NetSupport School Pro, which uses a weak encryption algorithm to encrypt passwords, enabling local users to obtain passwords. The available documents state the affected product and the underlying issue (weak encryption) but do not specify the exact vulnerable com...

CVE-2004-2046

CVE-2004-2046 affects APC PowerChute Business Edition 6.0–7.0.1. The vulnerability is described as allowing remote denial of service via unknown attack vectors. The NVD entry provides a CVSS v2 base score of 5.0 (medium) with a network attack vector, low attack complexity, no authentication requi...

CVE-2004-1897

The CVE describes a denial-of-service (segmentation fault) in Monit versions 1.4–4.2 triggered by sending a Basic Authentication request without a password. The underlying issue is a null pointer dereference leading to an out-of-bounds read when Monit decrements a null pointer. Affected software:...

CVE-2004-1827

Cross-site scripting XSS vulnerability in YaBB 1 GoldSP1.3 and YaBB SE 1.5.1 Final allows remote attackers to inject arbitrary web script via the background:url property in 1 glow or 2 shadow tags...

CVE-2004-2048

radmin in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier starts a process port 25072 that can be accessed with a default "jstwo" password, which allows remote attackers to gain access...

CVE-2004-1792

The CVE-2004-1792 issue affects YaSoft Switch Off (swnet.dll) versions 2.3 and earlier. A crafted long packet containing two CRLF sequences sent to the service management port (TCP 8000) can trigger an infinite loop, causing a denial of service and partial availability impact. Public sources in t...

CVE-2004-1987

picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to execute arbitrary commands via shell metacharacters in the 1 $CONFIG'impath' or 2 $CONFIG'jpegqual' parameters...

CVE-2004-2055

Cross-site scripting XSS vulnerability in search.php for PhpBB 2.0.4 and 2.0.9 allows remote attackers to inject arbitrary HTMl or web script via the searchauthor parameter...

CVE-2004-1866

CVE-2004-1866 affects Nstx 1.1 beta3 and earlier. The vulnerability allows remote attackers to cause a denial of service (crash) by sending a large packet that triggers a null dereference in the handling path. The available documents do not provide specifics on vulnerable functions, exact version...

CVE-2004-1885

WS_FTP Server 4.0.2 is affected by CVE-2004-1885. The vulnerability allows remote authenticated users to execute arbitrary programs as SYSTEM by using the SITE command to modify iFtpSvc options processed by iftpmgr.exe. This is a local/remote code-execution style impact described in the records, ...

CVE-2004-1906

Mcafee FreeScan is affected by CVE-2004-1906. A long string in the ScanParam property of a COM object can trigger a buffer overflow, enabling remote attackers to cause a denial of service and potentially execute arbitrary code. The vulnerability impact is noted as Partial availability impact with...

CVE-2004-1925

CVE-2004-1925 affects Tiki Wiki CMS Groupware (TikiWiki)

CVE-2004-1953

phProfession 2.5 is affected by CVE-2004-1953. The issue allows remote attackers to gain sensitive information by making a direct HTTP request to upload.php, which results in a PHP error message that reveals the file path. The NVD entry lists a Base Score of 5.0 (Medium) with Network attack vecto...

CVE-2004-2003

The CVE-2004-2003 issue affects DeleGate 8.9.2 and earlier, where a buffer overflow in the SSLway filter’s ssl_prcert function can be triggered by a certificate with an excessively long subject or issuer name. This could allow remote arbitrary code execution with the privileges of the DeleGate pr...

CVE-2004-1780

CVE-2004-1780 affects the Info Touch Surfnet kiosk. The issue allows local users to deposit extra time into Internet kiosk accounts via repeated authentication attempts. CVSS v2.0 base score 4.6 (Medium): vectors suggest Local access, Low attack complexity, no authentication, partial impact on co...

CVE-2004-1853

CVE-2004-1853 describes a buffer overflow in Terminator 3: War of the Machines 1.0 triggered by a long ServerInfo variable, allowing remote attackers to cause a denial of service. Affected software: Terminator 3: War of the Machines 1.0. The provided documents do not include explicit exploit deta...

CVE-2004-1963

CVE-2004-1963 discusses a vulnerability in Network Query Tool (NQT) 1.6 where the nqt.php handling of the portNum parameter leads to an error message that reveals the full filesystem path, potentially exposing sensitive information to remote attackers. The affected software is NQT; the vulnerable...

CVE-2004-1857

HP Web Jetadmin 7.x (tested on v7.5.2546) is affected by a directory traversal vulnerability in the setinfo.hts script, exploitable via the setinclude parameter to read arbitrary files outside the web root. This requires a remote authenticated attacker to trigger the flaw. No explicit fix/version...