CVE-2004-1533

Buffer overflow in pop3svr.exe for DMS POP3 1.5.3.27 and earlier allows remote attackers to cause a denial of service service crash via a long 1 username or 2 password...

CVE-2004-1493

Master of Orion III 1.2.5 and earlier is affected. The issue allows remote attackers to cause a denial of service (server crash) via multiple connections using long nicknames, possibly triggering a buffer overflow. Root cause isn’t explicitly detailed in the provided documents beyond this descrip...

CVE-2004-1492

Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service game exit via a data packet that contains a large size specifier, which causes a large memory allocation to fail...

CVE-2004-1518

SQL injection vulnerability in follow.php in Phorum 5.0.12 and earlier allows remote authenticated users to execute arbitrary SQL command via the forumid parameter...

CVE-2004-1534

ZoneAlarm and ZoneAlarm Pro before 5.5.062, with ad-blocking enabled, allows remote web sites to cause a denial of service application instability or system hang via certain JavaScript...

CVE-2004-1500

Format string vulnerability in the Lithtech engine, as used in multiple games, allows remote authenticated users to cause a denial of service application crash via format string specifiers in 1 a nickname or 2 a message...

CVE-2004-1524

CVE-2004-1524 affects Hired Team: Trial 2.0 and earlier and 2.200. The issue is triggered by a malformed UDP packet sent to a game port (e.g., 29200), causing a denial of service (game interruption). The framed information in the connected records confirms the affected software and the network-ba...

CVE-2004-1526

CVE-2004-1526 affects Hired Team: Trial 2.0 and earlier and 2.200; the description indicates no restriction on kicking other players, including administrators, on the game server. Root cause: missing or misconfigured access control that allows arbitrary kicks. Impact: potential disruption of serv...

CVE-2004-1514

04WebServer 1.42 is affected by a DoS vulnerability triggered by an HTTP request for an MS-DOS device name (e.g., COM2), causing the server to fail to restart properly. The CVE entry notes a partial availability impact. No additional exploit details or fixes are provided in the connected documents.

CVE-2004-1512

CVE-2004-1512 affects 04WebServer 1.42 via an XSS in Response_default.html. The vulnerability allows remote attackers to execute arbitrary script/HTML because URL script code is not quoted in the resulting default error page. Connected documents confirm this as the issue, but do not provide explo...

CVE-2004-1535

The CVE-2004-1535 issue affects the Cash Mod for phpBB, where admin_cash.php is vulnerable to remote file inclusion via the phpbb_root_path parameter, allowing an attacker to instruct the server to include PHP code from a remote URL and execute arbitrary code. This results in remote code executio...

CVE-2004-1518

Phorum 5.0.12 and earlier is affected by an SQL injection in follow.php triggered through the forum_id parameter. The vulnerability allows remote authenticated users to execute arbitrary SQL commands, indicating the issue lies in improper handling/validation of the forum_id input. Affected produc...

CVE-2004-1507

CVE-2004-1507 describes a CRLF injection flaw in WebCalendar’s login.php that allows remote attackers to inject CRLF sequences via the return_path parameter, enabling HTTP Response Splitting to alter server HTML content. The NVD entry lists a network attack vector with no authentication, low comp...

CVE-2004-1532

CVE-2004-1532 affects AppServ 2.5.x and earlier, where a default username and password allow remote attackers to gain access. The connected documents corroborate that the issue centers on default credentials enabling remote login to the affected service (e.g., MySQL-related checks in scanning too...

CVE-2004-1542

Buffer overflow in Soldier of Fortune II 1.03 Gold and earlier allows remote attackers to cause a denial of service (server or client crash) via a long (1) query or (2) reply. Affected software: Soldier of Fortune II (game client/server) prior to or including version 1.03 Gold. Root cause: unchec...

CVE-2004-1497

Web Forums Server 1.6 and 2.0 Power Pack store passwords in plaintext in the Username.ini file, enabling local users to gain privileges. This indicates a local-privilege escalation risk due to insecure credential storage. The available sources describe the vulnerable component and impact but do n...

CVE-2004-1505

Directory traversal vulnerability in index.php in Just Another Flat file JAF CMS 3.0RC allows remote attackers to read arbitrary files and possibly execute PHP code via a .. dot dot in the show parameter...

CVE-2004-1501

The CVE-2004-1501 entry concerns the webmail service in Lan Suite 602, versions up to 2004.0.04.0909 and earlier. The vulnerability allows remote attackers to cause a denial of service (CPU and memory consumption) by sending a POST request with a large Content-Length value and then disconnecting ...

CVE-2004-1500

CVE-2004-1500 : A format string vulnerability in the Lithtech engine (used in multiple games) allows remote authenticated users to cause a denial of service (application crash) by supplying format string specifiers in either a nickname or a message. Affected impact is limited to availability (par...

CVE-2004-1515

CVE-2004-1515 affects vBulletin 3.0.x with SQL injection in ttlast.php and last10.php. The vulnerability is exploitable via the fsel parameter, enabling remote attackers to execute arbitrary SQL statements (as demonstrated using last.php). The technical impact is consistent with a SQL injection i...