CVE-2004-2229

Technical details about CVE-2004-2229 are not available in the provided documents. The records show a generic description of multiple unknown vulnerabilities in Oracle 9i Lite Mobile Server with remote privilege gain, but no concrete specifics are provided. Monitor for updates.

CVE-2004-2196

Affected product: Zanfi CMS lite 1.1. The vulnerability is a path disclosure issue where remote attackers can obtain the full path of the web server by directly requesting pages (1) adm_pages.php, (2) corr_pages.php, (3) del_block.php, (4) del_page.php, (5) footer.php, (6) home.php, and others. R...

CVE-2004-2195

Zanfi CMS Lite 1.1 is affected by a PHP remote file inclusion in index.php via the inc parameter, leading to arbitrary PHP code execution. The issue is a file inclusion vulnerability in Zanfi CMS Lite’s index.php that allows an attacker to have the remote script include and run attacker-controlle...

CVE-2004-2196

Zanfi CMS lite 1.1 allows remote attackers to obtain the full path of the web server via direct requests without required arguments to 1 admpages.php, 2 corrpages.php, 3 delblock.php, 4 delpage.php, 5 footer.php, 6 home.php, and others...

CVE-2002-1742

CVE-2002-1742 affects SOAP::Lite 0.50–0.52. Remote attackers can exploit a non-existent function in a SOAP::Lite script to trigger AUTOLOAD and load arbitrary Perl functions. Affected: SOAP::Lite 0.50–0.52. Impact: as described in sources, potentially enabling arbitrary function execution; extern...

CVE-2002-1742

SOAP::Lite 0.50 through 0.52 allows remote attackers to load arbitrary Perl functions by suppling a non-existent function in a script using a SOAP::Lite module, which causes the AUTOLOAD subroutine to trigger...

CVE-2005-1617

Willings WebCam and WebCam Lite 2.8 and earlier stores the password in memory in plaintext, which allows local users to gain sensitive information...

CVE-2005-1617

Willings WebCam and WebCam Lite 2.8 and earlier stores the password in memory in plaintext, which allows local users to gain sensitive information...

CVE-2005-1608

Multiple unknown vulnerabilities in the Blocks module in Spidean AutoTheme 1.7 and AT-Lite for PostNuke have unknown impact...

CVE-2005-1608

The CVE-2005-1608 entry concerns the Blocks module in Spidean AutoTheme 1.7 and AT-Lite for PostNuke. Multiple unspecified vulnerabilities affect the Blocks component, with exposure described as potentially allowing a remote attacker to gain unauthorized access to the remote host. Affected produc...

CVE-2005-1617

The CVE-2005-1617 entry concerns Willings WebCam and WebCam Lite up to version 2.8, where passwords are stored in memory in plaintext. This is the underlying vulnerability: a local-access risk that could allow a user with access to the host to read the password from memory. The available document...

CVE-2005-1608

Multiple unknown vulnerabilities in the Blocks module in Spidean AutoTheme 1.7 and AT-Lite for PostNuke have unknown impact...

CVE-2004-1846

CVE-2004-1846 affects News Manager Lite 2.5 with multiple SQL injection flaws allowing remote attackers to execute arbitrary SQL via the (1) ID parameter to more.asp, (2) ID parameter to category_news.asp, or (3) filter parameter to news_sort.asp. The sources provided reiterate this vulnerability...

CVE-2004-1847

News Manager Lite 2.5 is affected by an authentication bypass vulnerability where an attacker can set the ADMIN parameter in the NEWS_LOGIN cookie to gain administrator privileges. The CVE entry, NVD, and CVE record confirm this issue as a credential bypass affecting News Manager Lite 2.5; no roo...

CVE-2004-1845

News Manager Lite 2.5 is affected by multiple cross-site scripting (XSS) vulnerabilities. An attacker can inject arbitrary script/HTML via specific user-supplied parameters: (1) email in comment_add.asp, (2) search in search.asp, and (3) n in category_news_headline.asp. The CVE entry notes these ...

CVE-2004-1846

Multiple SQL injection vulnerabilities in News Manager Lite 2.5 allow remote attackers to execute arbitrary SQL code via the 1 ID parameter to more.asp, 2 ID parameter to categorynews.asp, or 3 filter parameter to newssort.asp...

CVE-2005-0302

SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute arbitrary SQL commands via the referer field in the HTTP header...

CVE-2005-0301

comersusbackofficeinstall10.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to bypass authentication and gain privileges via a direct request to the program...

CVE-2005-0216

Cross-site scripting XSS vulnerability in formmail.php in Woltlab Burning Board Lite 1.0.0, 1.0.1e, and possibly other versions, allows remote attackers to inject arbitrary web script and HTML via the userid parameter...

CVE-2005-0303

Multiple cross-site scripting XSS vulnerabilities in 1 comersussupportError.asp or 2 comersusbackofficelitesupportError.asp in BackOffice Lite 6.0 and 6.01 allow remote attackers to inject arbitrary web script or HTML via the error parameter...