CVE-2004-0252

CVE-2004-0252 affects TYPSoft FTP Server 1.10. The vulnerability is a remote denial-of-service caused by sending an empty USER name to the FTP service, leading to increased CPU usage or a crash and resulting in unavailable service. OpenVAS entries corroborate a remote DoS/crash condition for this...

CVE-2004-0288

CVE-2004-0288 affects mnoGoSearch versions 3.2.13–3.2.15, where a buffer overflow in UdmDocToTextBuf could allow a remote attacker to execute arbitrary code by indexing a large document. The OpenVAS/OpenBSD/NVD entries confirm the vulnerability and impact, but no patch/version fix is specified in...

CVE-2004-0248

CVE-2004-0248 describes a cross-site scripting (XSS) vulnerability in PHPX 3.2.3. The issue allows remote attackers to run arbitrary script as another user by injecting HTML or script into three inputs: the keywords argument of main.inc.php, the body argument of help.inc.php, or the subject field...

CVE-2004-0241

X-Cart 3.4.3 allows remote attackers to execute arbitrary commands via the perlbinary argument in 1 upgrade.php or 2 general.php...

CVE-2004-0266

SQL injection vulnerability in the "public message" capability publicmessage for Php-Nuke 6.x to 7.1.0 allows remote attackers to obtain the administrator password via the cmid parameter...

CVE-2004-0258

CVE-2004-0258 affects RealNetworks RealPlayer family (RealOne Player, RealOne Player 2.0, RealOne Enterprise Desktop, RealPlayer Enterprise). The issue is multiple buffer overflows caused by improper handling of certain metafiles and streaming-image files, allowing remote attackers to execute arb...

CVE-2004-0275

CVE-2004-0275 describes a SQL injection vulnerability in BosDates

CVE-2004-0293

ShopCartCGI 2.3 contains a directory traversal flaw. The vulnerability affects the CGI scripts gotopage.cgi and genindexpage.cgi, permitting an unauthenticated remote attacker to read arbitrary files via a .. path in HTTP requests. Exploitation details or fixes are not provided in the connected d...

CVE-2004-0319

This CVE (CVE-2004-0319) concerns a Cross-site scripting (XSS) vulnerability in ezBoard 7.3u. The underlying issue is within the font tag handling, where attacker-controlled content can be injected via background:url used in a (1) font color or (2) font face argument, allowing remote execution of...

CVE-2004-0343

The CVE-2004-0343 entry concerns YaBB SE 1.5.4 through 1.5.5b, where multiple SQL injection flaws enable remote attackers to execute arbitrary SQL. The vulnerable vectors are in ModifyMessage.php via the msg parameter and via the postid parameter. Impact is described as complete confidentiality, ...

CVE-2004-0349

The vulnerability CVE-2004-0349 affects GWeb HTTP Server 0.6, enabling a directory traversal via a .. in the URL that could allow a remote attacker to view arbitrary files. The primary technical detail documented is the URL-based traversal vulnerability and the affected product/version (GWeb HTTP...

CVE-2004-0361

The CVE-2004-0361 case concerns the Safari Javascript engine (Safari 1.2 and earlier). The vulnerability arises when code creates a new Array object with a large size value and then writes into that array, enabling a remote attacker to trigger a denial-of-service (segmentation fault). The availab...

CVE-2004-0239

CVE-2004-0239 affects PhotoPost PHP Pro up to version 4.6. The vulnerability is a SQL injection in the showphoto.php script, exploitable via the photo parameter, which allows remote attackers to access unauthorized data. The issue stems from unsanitized input used in a database query. Affected so...

CVE-2004-0355

Invision Power Board 1.3 Final allows remote attackers to gain sensitive information by selecting a file for "Personal Photo" that is not an image file, which displays the installation path in an error message...

CVE-2004-0331

CVE-2004-0331 describes a heap-based buffer overflow in Dell OpenManage Web Server (omws32.exe) due to a boundary error when handling POST requests. Affected versions include 3.2.0–3.7.1 (per connected advisories and the MSF module), with exploitation possible via a remote HTTP POST containing an...

CVE-2004-0352

The vulnerability CVE-2004-0352 affects Cisco 11000 Series Content Services Switches running WebNS. Specifically, WebNS 5.0(x) before 05.0(04.07)S and 6.10(x) before 06.10(02.05)S are susceptible. A remote attacker can trigger a denial of service (device reset) by sending a malformed UDP packet t...

CVE-2004-0241

CVE-2004-0241 affects X-Cart 3.4.3 (Qualiteam X-Cart). The vulnerability allows remote attackers to execute arbitrary commands by supplying output in the perl_binary parameter in either upgrade.php or general.php. The underlying cause is improper handling of the perl_binary argument, leading to a...

CVE-2004-0341

CVE-2004-0341 affects WFTPD Pro Server 3.21 Release 1 . The flaw arises because the server allocates memory for a command until a 0x0A (newline) is received, enabling a local attacker to cause a denial of service (CPU consumption) by sending a long command that never contains a newline. The NVD e...

CVE-2004-0340

CVE-2004-0340 corresponds to a stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10. The vulnerability allows local users to execute arbitrary code by sending abnormally long commands in LIST, NLST, or STAT. This is a lo...

CVE-2004-0292

Summary: CVE-2004-0292 concerns Sami HTTP Server (KarjaSoft) 1.0.4. The vulnerability is a buffer overflow triggered by a long HTTP GET request, allowing remote attackers to cause a crash (DoS) and potentially execute arbitrary code. The OpenVAS entries also reference Sami HTTP Server v1.0.4 or o...