CVE-2004-0250

The CVE-2004-0250 issue is a SQL injection in PhotoPost PHP Pro 4.6 and earlier. The vulnerability allows remote attackers to gain privileges via user-controlled inputs in showproduct.php (product parameter) or showcat.php (cat parameter). The describes affected component is the PHP-based PhotoPo...

CVE-2004-0254

Cross-site scripting XSS vulnerability in Discuz! Board 2.x and 3.x allows remote attackers to execute arbitrary script as other users via an img tag...

CVE-2004-0324

Confirm 0.62 and earlier could allow remote attackers to execute arbitrary code via an e-mail header that contains shell metacharacters such as ", , |, ;, or $...

CVE-2004-0294

YaBB 1 SP 1.3.1 is vulnerable to information disclosure via password enumeration. The vulnerability arises because the application displays different error messages when a user exists versus does not exist, enabling remote attackers to determine valid usernames and perform brute‑force password gu...

CVE-2004-0355

CVE-2004-0355 affects Invision Power Board 1.3 Final. A remote attacker can select a non-image file for the "Personal Photo" field, causing an error message that reveals the installation path (partial information disclosure). The NVD/NVD-derived data indicate a base score of 5.0 (Medium), network...

CVE-2004-0237

CVE-2004-0237 corresponds to a directory traversal vulnerability in the Aprox PHP Portal, specifically in index.php where the show parameter can be used to read arbitrary files. This is publicly documented in CVE/NVD entries as a vulnerability enabling unauthorized file disclosure. The connected ...

CVE-2004-0281

CVE-2004-0281 affects Caucho Resin (2.1.12) and is a path traversal vulnerability that allows remote disclosure of files under the /WEB-INF/ directory by requesting WEB-INF.., effectively bypassing directory boundaries. The core issue is improper normalization of path traversal sequences, enablin...

CVE-2004-0255

Xlight 1.52, with log to screen enabled, allows remote attackers to cause a denial of service by requesting a long directory consisting of . dot and / slash characters, which causes the server to crash when the administrator views the log file, possibly triggering a buffer overflow...

CVE-2004-0313

PSO Proxy 0.91 contains a stack buffer overflow in its HTTP handling. A remote attacker can send an excessively long HTTP request (e.g., a long GET argument or long method name) to overwrite the stack, causing denial of service and potentially executing arbitrary code. Public evidence of exploita...

CVE-2004-0277

CVE-2004-0277 is a format-string vulnerability in Dream FTP 1.02 where the username is unsafely processed, allowing a remote attacker to crash the server and potentially execute arbitrary code. The NVD entry assigns a base score of 10.0 ( HIGH ) with network attack vector and complete impact. A c...

CVE-2004-0333

Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters...

CVE-2004-0304

The CVE maps to WebStores 2000 (WebCortex WebStores 2000 6.0). A SQL injection vulnerability in browse_items.asp (and related details via browse_item_details.asp) allows remote attackers to manipulate the backend database through the Search_Text parameter, potentially enabling unauthorized access...

CVE-2004-0272

CVE-2004-0272 describes an SQL injection vulnerability in MaxWebPortal that allows remote attackers to inject arbitrary SQL via the SendTo parameter in Personal Messages, potentially exposing sensitive information. The NVD reports a CVSS v2 base score of 7.5 (HIGH) with network access, low attack...

CVE-2004-0239

SQL injection vulnerability in showphoto.php in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain unauthorized access via the photo variable...

CVE-2004-0112

The CVE-2004-0112 issue affects OpenSSL 0.9.7a/b/c: during the SSL/TLS handshake, the Kerberos ciphersuite path fails to validate the Kerberos ticket length, enabling a remote attacker to cause a denial-of-service by triggering an out-of-bounds read. Public sources in connected documents confirm ...

CVE-2004-0335

LAN SUITE Web Mail 602Pro, when configured to use the "Directory browsing" feature, allows remote attackers to obtain a directory listing via an HTTP request to 1 index.html, 2 cgi-bin/, or 3 users/...

CVE-2004-0217

CVE-2004-0217 affects Symantec AntiVirus Scan Engine on Red Hat Linux (LiveUpdate capability via liveupdate.sh) and allows local users to create or append arbitrary files by exploiting a symlink on /tmp/LiveUpdate.log. Affected versions: 4.0 and 4.3. Root cause: symlink attack in LiveUpdate.log h...

CVE-2004-0107

The 1 post and 2 trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temporary files, a different vulnerability than CVE-2004-0108...

CVE-2004-0217

The LiveUpdate capability liveupdate.sh in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log...

CVE-2004-0107

CVE-2004-0107 affects sysstat up to version 4.0.7. The vulnerability is local and arises from insecure handling of temporary files in the (1) post and (2) trigger scripts, enabling a local user to overwrite arbitrary files via symlink attacks. Root cause: inadequate protections around temporary f...