CVE-2004-1678

CVE-2004-1678 describes a directory traversal vulnerability in PerlDesk’s pdesk.cgi. A remote attacker can read portions of arbitrary files (and possibly trigger execution of Perl modules) by crafting lang parameters with ‘..’ sequences terminated by a NULL character (%00), potentially leaking fi...

CVE-2005-0343

CVE-2005-0343 corresponds to a SQL injection in PerlDesk 1.x via the view parameter, enabling remote attackers to inject arbitrary SQL. Exploitation details in connected Nessus/NASL data indicate network-based, low-complexity access with no authentication, causing partial impact to confidentialit...

CVE-2004-1677

Technical details about CVE-2004-1677 are not provided in the provided documents. The description notes an information disclosure via invalid lang parameter in pdesk.cgi, but no further data on affected versions, root cause, or fixes is provided here. Monitor for updates.