CVE-2004-0259

The checkreferer function in Formmail.php 5.0 and earlier allows remote attackers to bypass access restrictions via an empty or spoofed HTTP Referer, as demonstrated using an application on the same web server that contains a cross-site scripting XSS issue...

CVE-2004-0247

The client and server of Chaser 1.50 and earlier allow remote attackers to cause a denial of service crash via exception via a UDP packet with a length field that is greater than the actual data length, which causes Chaser to read unexpected memory...

CVE-2004-0288

Buffer overflow in the UdmDocToTextBuf function in mnoGoSearch 3.2.13 through 3.2.15 could allow remote attackers to execute arbitrary code by indexing a large document...

CVE-2004-0275

SQL injection vulnerability in calendardownload.php in BosDates 3.2 and earlier allows remote attackers to obtain sensitive information and gain access via the calendar parameter...

CVE-2004-0250

The CVE-2004-0250 issue is a SQL injection in PhotoPost PHP Pro 4.6 and earlier. The vulnerability allows remote attackers to gain privileges via user-controlled inputs in showproduct.php (product parameter) or showcat.php (cat parameter). The describes affected component is the PHP-based PhotoPo...

CVE-2004-0319

Cross-site scripting XSS vulnerability in the font tag in ezBoard 7.3u allows remote attackers to execute arbitrary script as other users, as demonstrated using the background:url in a 1 font color or 2 font face argument...

CVE-2004-0286

CVE-2004-0286 describes a buffer overflow in RobotFTP 1.0 and 2.0 beta 1 that can be triggered by a long username, leading to remote denial of service and potentially arbitrary code execution. The affected components are the RobotFTP server processes handling user authentication; the underlying c...

CVE-2004-0331

Heap-based buffer overflow in Dell OpenManage Web Server 3.4.0 allows remote attackers to cause a denial of service crash via a HTTP POST with a long application variable...

CVE-2004-0296

TsFtpSrv.exe in Broker FTP 6.1.0.0 allows remote attackers to cause a TsFtpSrv.exe to exit with an exception by opening and immediately closing a connection...

CVE-2004-0304

SQL injection vulnerability in browseitems.asp in WebCortex WebStores 2000 6.0 allows remote attackers to gain unauthorized access and execute arbitrary commands via the SearchText parameter...

CVE-2004-0304

The CVE maps to WebStores 2000 (WebCortex WebStores 2000 6.0). A SQL injection vulnerability in browse_items.asp (and related details via browse_item_details.asp) allows remote attackers to manipulate the backend database through the Search_Text parameter, potentially enabling unauthorized access...

CVE-2004-0340

Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10 allows local users to execute arbitrary code via long 1 LIST, 2 NLST, or 3 STAT commands...

CVE-2004-0299

Buffer overflow in smallftpd 0.99 allows local users to cause a denial of service crash via an FTP request with a large number of "/" slash characters...

CVE-2004-0346

CVE-2004-0346 affects ProFTPD 1.2.7–1.2.9rc2, caused by an off-by-one buffer overflow in _xlate_ascii_write() triggered by a crafted RETR command (1023+ bytes). According to the CVE record, this enables local users to gain privileges; PT-2004-1500 also documents a remote-triggered scenario via RE...

CVE-2004-0285

The CVE-2004-0285 issue is a PHP remote file inclusion in include/footer.inc.php affecting AllMyVisitors, AllMyLinks, and AllMyGuests. An attacker can execute arbitrary PHP code by supplying a URL in the _AMVconfig[cfg_serverpath] parameter, enabling code execution over the network. The vulnerabi...

CVE-2004-0354

CVE-2004-0354 affects GNU Anubis versions 3.6.0–3.6.2 and 3.9.92–3.9.93. The issue is a format string vulnerability in three code paths: the info function in log.c, the anubis_error function in errs.c, and the ssl_error function in ssl.c, which can enable remote code execution. The connected docu...

CVE-2004-0321

Team Factor 1.25 and earlier allows remote attackers to cause a denial of service crash via a packet that uses a negative number to specify the size of the data block that follows, which causes Team Factor to read unallocated memory...

CVE-2004-0286

Buffer overflow in RobotFTP 1.0 and 2.0 beta 1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long username...

CVE-2004-0255

Xlight 1.52, with log to screen enabled, allows remote attackers to cause a denial of service by requesting a long directory consisting of . dot and / slash characters, which causes the server to crash when the administrator views the log file, possibly triggering a buffer overflow...

CVE-2004-0324

Confirm 0.62 and earlier could allow remote attackers to execute arbitrary code via an e-mail header that contains shell metacharacters such as ", , |, ;, or $...