CVE-2004-1730

CVE-2004-1730 is an XSS vulnerability in the Mantis bugtracker. The issue allows remote attackers to inject arbitrary script/HTML via four vectors: (1) the return parameter to login_page.php, (2) the e-mail field in signup.php, (3) the action parameter to login_select_proj_page.php, and (4) the h...

CVE-2004-1703

Fusion News 3.6.1 is affected. A remote attacker can add user accounts if the administrator is logged in by embedding an img bbcode tag in a comment that calls index.php with the signup action, which executes when the administrator’s browser loads the page containing the img tag. This is due to t...

CVE-2004-1752

Summary: CVE-2004-1752 is a stack-based buffer overflow in Gaucho 1.4 Build 145 that allows a remote attacker to execute arbitrary code by sending a POP3 message with a long Content-Type header. The issue arises from a vulnerable component handling Content-Type data. Affected products/versions: G...

CVE-2004-1716

CVE-2004-1716 is a cross-site scripting (XSS) vulnerability affecting PForum before 1.26 . The issue allows remote attackers to inject arbitrary web script or HTML through the IRC Server or AIM ID fields in the user profile. The connected documents confirm the affected component and vectors but d...

CVE-2004-1735

Cross-site scripting XSS vulnerability in the create list option in Sympa 4.1.x and earlier allows remote authenticated users to inject arbitrary web script or HTML via the description field...

CVE-2004-1748

NtRegmon before 6.12 allows local users to cause a denial of service crash, while NtRegmon is running, via invalid pointers to hook functions such as ZwSetQueryValue...

CVE-2004-1703

Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is logged in, via a comment that contains an img bbcode tag that calls index.php with the signup action, which is executed when the administrator's browser loads the page with the img tag...

CVE-2004-1726

The CVE-2004-1726 vulnerability affects XV, with multiple integer overflows in xviris.c, xvpcx.c, and xvpm.c that can be triggered by a crafted image file, causing a heap-based buffer overflow and remote code execution as described in multiple sources (NVD/SUSE/CVE records). The provided document...

CVE-2004-1735

The CVE-2004-1735 entry describes a Cross-site Scripting (XSS) vulnerability in Sympa, affecting version 4.1.x and earlier, where remote authenticated users can inject arbitrary script/HTML through the description field when using the create list option. The issue is categorized as an HTML inject...

CVE-2004-1720

CVE-2004-1720 concerns Merak Mail Server 5.2.7 where an invalid HTTP request on address.html (and possibly calendar.html) can reveal the installation path via web logs or responses. The NVD entry notes partial confidentiality impact with a base score of 5.0 (MEDIUM). Connected documents also desc...

CVE-2004-1718

The CVE-2004-1718 entry concerns Integrity Protection Driver (IPD) versions 1.4 and earlier. Affected component: ZwOpenSection function. Root cause: an invalid pointer in the oa argument can be exploited by a local attacker, causing a crash (denial of service). Impact is described as local denial...

CVE-2004-1746

The CVE-2004-1746 entry describes a Cross-site scripting (XSS) vulnerability in PHP Code Snippet Library’s index.php, exploitable via the cat_select and show parameters. The underlying issue is inadequate input sanitization in index.php, allowing remote attackers to inject arbitrary JavaScript in...

CVE-2004-1740

Music daemon musicd 0.0.3 and earlier allows remote attackers to read arbitrary files by calling LOAD with a full pathname, then calling SHOWLIST...

CVE-2004-1708

CVE-2004-1708 affects Webbsyte Chat 0.9.0. The connected documents consistently describe a denial of service: remote attackers can crash the service by establishing a large number of connections. No explicit exploit details, mitigations, or patch information are provided in the sources. The vulne...

CVE-2004-1739

CVE-2004-1739 concerns Bird Chat 1.61, where remote attackers can trigger a denial of service (crash) by sending invalid user data. The vulnerability affects the availability of the service (CVSS v2 base score 5.0, AV:N/AC:L/Au:N/C:N/I:N/A:P). Details in connected records consistently specify Bir...

CVE-2004-1741

Music daemon musicd 0.0.3 and earlier allows remote attackers to cause a denial of service crash by calling LOAD with a binary file as an argument, then calling SHOWLIST...

CVE-2004-1739

Bird Chat 1.61 allows remote attackers to cause a denial of service crash via invalid users...

CVE-2004-1738

Cross-site scripting XSS vulnerability in page.php in JShop allows remote attackers to inject arbitrary web script or HTML via the xPage parameter...

CVE-2004-1729

Nihuo Web Log Analyzer 1.6 is affected by a cross-site scripting (XSS) vulnerability that can be triggered via the User-Agent HTTP header, potentially allowing an attacker to inject arbitrary scripts or HTML. The issue is documented across CVE/NVD entries with the same vector and impact (I: PARTI...

CVE-2004-1732

CVE-2004-1732 affects MyDMS before 1.4.2, with an SQL injection in the code path out.ViewFolder.php that accepts the folderid parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands via that input, enabling potential data access or manipulation. The connected docume...