CVE-2004-1570

SQL injection vulnerability in bBlog 0.7.2 and 0.7.3 allows remote attackers to execute arbitrary SQL commands via the p parameter...

CVE-2004-1692

CVE-2004-1692 describes a cross‑site scripting (XSS) vulnerability in the Mambo 4.5 (1.0.9) index.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML by manipulating the (1) Itemid, (2) mosmsg, or (3) limit parameters. The issue is documented with a CVSS v2 base ...

CVE-2004-1667

Technical details about CVE-2004-1667 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2004-1625

pGina 1.7.6 and possibly older versions, when the Restart or Shutdown options are enabled on the login screen, allows remote attackers to cause a denial of service by connecting via Remote Desktop and clicking restart or shutdown...

CVE-2004-1577

The CVE-2004-1577 vulnerability affects PHP Links: index.php exposes a sensitive full path via an invalid show parameter, leading to information disclosure. The underlying issue is an error message that reveals the server path when the parameter is malformed. Documentation in connected records co...

CVE-2004-1611

SalesLogix 6.1 is affected by an authentication check failure that allows remote attackers to perform sensitive operations without verifying the user, potentially enabling (1) execution of arbitrary SLX commands on the server or server spoofing via MITM, and (2) retrieval of the database password...

CVE-2004-1547

CVE-2004-1547 affects ActivePost Standard 3.1 and earlier. The file server allows remote authenticated users to cause a denial of service (application crash) by supplying a long filename, with the description noting a possible buffer overflow as the underlying issue. The available documents do no...

CVE-2004-1549

The CVE affects ActivePost Standard 3.1: the conference menu transmits passwords for password-protected rooms in cleartext, enabling a network observer to capture sensitive credentials. No explicit remediation details are provided in the connected documents; exploitation specifics (or patches) ar...

CVE-2004-1646

CVE-2004-1646 affects Xedus Peer-to-Peer web server (Xedus 1.0). The OpenVAS/Nessus entries describe a directory-traversal vulnerability allowing an attacker to view arbitrary files by crafting a URL containing ..; documents do not provide exploitation status. Remediation cited in the OpenVAS/Nes...

CVE-2004-1589

CVE-2004-1589 documents a cross-site scripting (XSS) vulnerability in GoSmart Message Board (ASP). The flaw allows remote attackers to inject and execute scripts via (1) Category on Forum.asp or (2) MainMessageID on ReplyToQuestion.asp. Connected sources corroborate XSS presence and relate GoSmar...

CVE-2004-1600

CVE-2004-1600 affects index.php in CoolPHP 1.0-stable, where a malformed op parameter allows remote attackers to reveal the path in an error message, exposing sensitive information (NVD: CVSSv2 base 5.0, MEDIUM). The issue is described consistently across NVD/CVE references; no remediation or exp...

CVE-2004-1601

The CVE-2004-1601 entry concerns CoolPHP 1.0-stable. Affected component: index.php; vulnerability: directory traversal via the op parameter using .. to access arbitrary files and execute local PHP scripts. Root cause: improper input validation leading to path traversal. Exploitation details are n...

CVE-2004-1597

The CVE-2004-1597 entry documents a denial-of-service condition affecting RIM BlackBerry 7230 devices running BlackBerry OS 3.7 SP1. The vulnerability arises when processing a calendar message with an excessively long Location field, which triggers a watchdog during message storage and can lead t...

CVE-2004-1562

The connected Nessus/NV documents confirm CVE-2004-1562 affects w-Agora 4.1.6a; vulnerability is a SQL injection in redir_url.php, exploitable via the key parameter to execute arbitrary SQL in the remote database. The related NASL entry also notes additional input validation flaws (XSS and HTTP r...

CVE-2004-1569

CVE-2004-1569 is a buffer overflow in dBpowerAMP components (MusicConverter.exe, playlist.exe, amp.exe) affecting dBpowerAMP Audio Player 2.0 and dbPowerAmp Music Converter 10.0. A long File1 field in .pls/.m3u playlists can cause denial of service or arbitrary code execution. Connected sources i...

CVE-2004-1568

CVE-2004-1568 affects ParaChat Server 5.5. The vulnerability is a directory traversal in the server’s URL handling, exploited via a hex-encoded dot-dot (e.g., ..%5C) to read arbitrary files. The NVD entry lists medium severity (CVSSv2 base score 5.0) with network attack vector and no authenticati...

CVE-2004-1680

The CVE-2004-1680 issue affects the Pingtel Xpressa handset (firmware 2.1.11.24) where application.cgi can be abused by remote authenticated users via a long HTTP GET request, potentially triggering a buffer overflow and causing a VxWorks OS crash (DoS). Connected sources confirm the vulnerabilit...

CVE-2004-1641

Heap-based buffer overflow in Titan FTP 3.21 and earlier allows remote attackers to cause a denial of service crash via a long FTP command such as 1 CWD, 2 STAT, or 3 LIST...

CVE-2004-1561

CVE-2004-1561 describes a buffer overflow in Icecast (

CVE-2004-1554

The CVE-2004-1554 entry concerns @lex Guestbook (PHP) with a remote file inclusion vulnerability in livre_include.php where the chem_absolu parameter can be manipulated to reference a remote URL containing PHP code. This allows an attacker to remotely include and execute arbitrary PHP code on the...