CVEs

340,773 total · page 6613 of 6,816

CVE	Vendor / Product	Risk	CVSS	EPSS	Published	Description
CVE-2004-1540	Zyxel Prestige	0.03	—	0.05	Dec 31, 2004	ZyXEL Prestige 623, 650, and 652 HW Routers, and possibly other versions, with HTTP Remote Administration enabled, does not require a password to access rpFWUpload.html, which allows remote attackers to reset the router configuration file.
CVE-2004-1541	Van Dyke Technologies Securecrt	0.00	—	0.01	Dec 31, 2004	SecureCRT 4.0, 4.1, and possibly other versions, allows remote attackers to execute arbitrary commands via a telnet:// URL that uses the /F option to specify a configuration file on a samba share.
CVE-2004-1542	Soldier of Fortune II Soldier of Fortune II	0.03	—	0.06	Dec 31, 2004	Buffer overflow in Soldier of Fortune II 1.03 Gold and earlier allows remote attackers to cause a denial of service (server or client crash) via a long (1) query or (2) reply.
CVE-2004-1543	Korweblog Korweblog	0.03	—	0.06	Dec 31, 2004	Directory traversal vulnerability in viewimg.php in KorWeblog 1.6.2-cvs and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in the path parameter.
CVE-2004-1544	Jspwiki Jspwiki	0.00	—	0.00	Dec 31, 2004	Cross-site scripting (XSS) vulnerability in Search.jsp in JSPWiki 2.1.120-cvs and earlier allows remote attackers to execute arbitrary web script as other users via the query parameter.
CVE-2004-1545	Moniwiki Moniwiki	0.00	—	0.02	Dec 31, 2004	UploadFile.php in MoniWiki 1.0.9.2 and earlier, when used with Apache mod_mime, does not properly handle files with two file extensions, such as .php.hwp, which allows remote attackers to upload and execute arbitrary code.
CVE-2004-1546	Alt N Mdaemon	0.07	—	0.49	Dec 31, 2004	Multiple buffer overflows in MDaemon 6.5.1 allow remote attackers to cause a denial of service (application crash) via a long (1) SAML, SOML, SEND, or MAIL command to the SMTP server or (2) LIST command to the IMAP server.
CVE-2004-1547	Onnuri Infotek Activepost Standard	0.00	—	0.02	Dec 31, 2004	The file server in ActivePost Standard 3.1 and earlier allows remote authenticated users to cause a denial of service (application crash) via a long filename, possibly triggering a buffer overflow.
CVE-2004-1548	Onnuri Infotek Activepost Standard	0.00	—	0.02	Dec 31, 2004	Directory traversal vulnerability in the file server in ActivePost Standard 3.1 allows remote authenticated users to upload arbitrary files via a .. (dot dot) in the filename.
CVE-2004-1549	Onnuri Infotek Activepost Standard	0.00	—	0.01	Dec 31, 2004	The conference menu in ActivePost Standard 3.1 sends passwords of password-protected rooms in cleartext, which could allow remote attackers to gain sensitive information by sniffing the network connection.
CVE-2004-1550	Motorola Wr850g	0.06	—	0.35	Dec 31, 2004	Motorola Wireless Router WR850G running firmware 4.03 allows remote attackers to bypass authentication, log on as an administrator, and obtain sensitive information by repeatedly making an HTTP request for ver.asp until an administrator logs on.
CVE-2004-1551	paFileDB paFileDB	0.03	—	0.01	Dec 31, 2004	Cross-site scripting (XSS) vulnerability in the (1) email or (2) file modules in paFileDB 3.1 Final allows remote attackers to execute arbitrary web script or HTML via the id parameter.
CVE-2004-1552	Webcalendar Webcalendar	0.03	—	0.04	Dec 31, 2004	SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via (1) the username field on the login page or (2) the eventid parameter to calendar.asp.
CVE-2004-1553	Fullrevolution Aspwebalbum	0.03	—	0.04	Dec 31, 2004	SQL injection vulnerability in aspWebAlbum allows remote attackers to execute arbitrary SQL statements via (1) the username field on the login page or (2) the cat parameter to album.asp. NOTE: it was later reported that vector 1 affects aspWebAlbum 3.2, and the vector involves…
CVE-2004-1554	Alexphpteam Alex Guestbook	0.03	—	0.05	Dec 31, 2004	PHP remote file inclusion vulnerability in livre_include.php in @lex Guestbook allows remote attackers to execute arbitrary PHP code by modifying the chem_absolu parameter to reference a URL on a remote web server that contains the code.
CVE-2004-1555	Infuseum Asp Message Board	0.03	—	0.02	Dec 31, 2004	Multiple SQL injection vulnerabilities in BroadBoard Instant ASP Message Board allow remote attackers to run arbitrary SQL commands via the (1) keywords parameter to search.asp, (2) handle parameter to profile.asp, (3) txtUserHandle parameter to reg2.asp or (4) txtUserEmail…
CVE-2004-1556	Mywebserver Mywebserver	0.00	—	0.01	Dec 31, 2004	MyWebServer 1.0.3 allows remote attackers to cause a denial of service (application crash) via a large number of connections within a short time.
CVE-2004-1557	Mywebserver Mywebserver	0.00	—	0.01	Dec 31, 2004	MyWebServer 1.0.3 allows remote attackers to bypass authentication, modify configuration, and read arbitrary files via a direct HTTP request to (1) /admin or (2) ServerProperties.html.
CVE-2004-1558	Ypops Ypops	0.10	—	0.86	Dec 31, 2004	Multiple stack-based buffer overflows in YPOPs! (aka YahooPOPS) 0.4 through 0.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) POP3 USER command or (2) SMTP request.
CVE-2004-1559	WordPress WordPress	0.03	—	0.01	Dec 31, 2004	Multiple cross-site scripting (XSS) vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) redirect_to, text, popupurl, or popuptitle parameters to wp-login.php, (2) redirect_url parameter to admin-header.php, (3) popuptitle,…
CVE-2004-1560	Microsoft SQL Server	0.04	—	0.14	Dec 31, 2004	Microsoft SQL Server 7.0 allows remote attackers to cause a denial of service (mssqlserver service halt) via a long request to TCP port 1433, possibly triggering a buffer overflow.
CVE-2004-1561	Xiph.Org Icecast	0.10	—	0.82	Dec 31, 2004	Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a large number of headers.
CVE-2004-1562	W Agora W Agora	0.03	—	0.01	Dec 31, 2004	SQL injection vulnerability in redir_url.php in w-Agora 4.1.6a allows remote attackers to execute arbitrary SQL commands via the key parameter.
CVE-2004-1563	W Agora W Agora	0.03	—	0.01	Dec 31, 2004	Multiple cross-site scripting (XSS) vulnerabilities in w-Agora 4.1.6a allow remote attackers to execute arbitrary web script or HTML via the (1) thread parameter to download_thread.php, (2) loginuser parameter to login.php, or (3) userid parameter to forgot_password.php.
CVE-2004-1564	W Agora W Agora	0.03	—	0.06	Dec 31, 2004	CRLF injection vulnerability in subscribe_thread.php in w-Agora 4.1.6a allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the thread parameter.
CVE-2004-1565	W Agora W Agora	0.00	—	0.01	Dec 31, 2004	list.php in w-Agora 4.1.6a allows remote attackers to reveal the full path via a crafted HTTP request, possibly involving a malformed id parameter.
CVE-2004-1566	Silent Storm Silent Storm Portal	0.00	—	0.01	Dec 31, 2004	Cross-site scripting (XSS) vulnerability in index.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to execute arbitrary web script or HTML via the module parameter.
CVE-2004-1567	Silent Storm Silent Storm Portal	0.03	—	0.06	Dec 31, 2004	profile.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to gain privileges by setting the mail parameter to 1, which is the value for an administrator.
CVE-2004-1568	Parachat Parachat Server	0.00	—	0.01	Dec 31, 2004	Directory traversal vulnerability in ParaChat Server 5.5 allows remote attackers to read arbitrary files via a ..%5C (hex-encoded dot dot) in the URL.
CVE-2004-1569	Illustrate Dbpoweramp Audio Player	0.04	—	0.13	Dec 31, 2004	Buffer overflow in (1) MusicConverter.exe, (2) playlist.exe, and (3) amp.exe in dBpowerAMP Audio Player 2.0 and dbPowerAmp Music Converter 10.0 allows remote attackers to cause a denial of service or execute arbitrary code via a .pls or .m3u playlist that contains long File1…
CVE-2004-1570	Bblog Bblog	0.00	—	0.01	Dec 31, 2004	SQL injection vulnerability in bBlog 0.7.2 and 0.7.3 allows remote attackers to execute arbitrary SQL commands via the p parameter.
CVE-2004-1571	Aj Fork Aj Fork	0.00	—	0.01	Dec 31, 2004	AJ-Fork 167 allows remote attackers to gain sensitive information via a direct request to (1) auto-acronyms.php, (2) auto-archive.php, (3) ount-article-views.php, (4) kses.php, (5) custom-quick-tags.php, (6) disable-all-comments.php, (7) easy-date-format.php, (8)…
CVE-2004-1572	Aj Fork Aj Fork	0.00	—	0.01	Dec 31, 2004	AJ-Fork 167 does not restrict access to directories such as (1) data, (2) inc, (3) plugins, (4) skins, or (5) tools, which allows remote attackers to list files in those directories via a direct HTTP request.
CVE-2004-1573	Cutephp Cutenews	0.00	—	0.00	Dec 31, 2004	The documentation for AJ-Fork 167 implies that users should set permissions for users.db.php to 777, which allows local users to execute arbitrary PHP code and gain privileges as the administrator.
CVE-2004-1574	Novell Messenger	0.01	—	0.07	Dec 31, 2004	Buffer overflow in Vypress Messenger 3.5.1 and earlier allows remote attackers to execute arbitrary code via a message with a long first field.
CVE-2004-1575	Xerces-C++ Xerces-C++	0.00	—	0.03	Dec 31, 2004	The XML parser in Xerces-C++ 2.5.0 allows remote attackers to cause a denial of service (CPU consumption) via XML attributes in a crafted XML document.
CVE-2004-1576	—	0.00	—	0.01	Dec 31, 2004	Format string vulnerability in Judge Dredd: Dredd vs. Death 1.01 and earlier allows remote attackers to cause a denial of service (application crash) via format string specifiers in a chat message.
CVE-2004-1577	Greg Donald Phplinks	0.00	—	0.00	Dec 31, 2004	index.php in PHP Links allows remote attackers to gain sensitive information via an invalid show parameter, which reveals the full path in an error message.
CVE-2004-1578	Invision Power Services Invision Power Board	0.00	—	0.01	Dec 31, 2004	Cross-site scripting (XSS) vulnerability in index.php in Invision Power Board 2.0.0 allows remote attackers to execute arbitrary web script or HTML via the Referer field in the HTTP header.
CVE-2004-1579	Cubecart Cubecart	0.00	—	0.00	Dec 31, 2004	index.php in CubeCart 2.0.1 allows remote attackers to gain sensitive information via an HTTP request with an invalid cat_id parameter, which reveals the full path in a PHP error message.
CVE-2004-1580	Cubecart Cubecart	0.03	—	0.01	Dec 31, 2004	SQL injection vulnerability in index.php in CubeCart 2.0.1 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.
CVE-2004-1581	Blackboard Blackboard	0.00	—	0.00	Dec 31, 2004	BlackBoard 1.5.1 allows remote attackers to gain sensitive information via a direct request to (1) checkdb.inc.php, (2) admin.inc.php or (3) cp.inc.php, which reveals the path in a PHP error message.
CVE-2004-1582	Blackboard Blackboard	0.00	—	0.01	Dec 31, 2004	PHP remote file inclusion vulnerability in BlackBoard 1.5.1 allows remote attackers to execute arbitrary PHP code by modifying the libpath parameter (incorrectly called "libpach") to reference a URL on a remote web server that contains _more.php, as demonstrated using…
CVE-2004-1583	Tridcomm Tridcomm	0.00	—	0.01	Dec 31, 2004	Directory traversal vulnerability in the FTP server in TriDComm 1.3 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in FTP commands such as (1) DIR, (2) GET, or (3) PUT.
CVE-2004-1584	WordPress WordPress	0.04	—	0.16	Dec 31, 2004	CRLF injection vulnerability in wp-login.php in WordPress 1.2 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the text parameter.
CVE-2004-1585	Jera Technology Flash Messaging Server	0.03	—	0.06	Dec 31, 2004	Flash Messaging 5.2.0g (rev 1.1.2) and earlier allows remote attackers to cause a denial of service (application crash) via certain wide characters.
CVE-2004-1586	Jera Technology Flash Messaging Server	0.00	—	0.00	Dec 31, 2004	Flash Messaging clients can ignore disconnecting commands such as "shutdown" from the Flash Messaging Server 5.2.0g (rev 1.1.2), which could allow remote attackers to stay connected.
CVE-2004-1587	Monolith Productions Alien Versus Predator	0.04	—	0.12	Dec 31, 2004	Buffer overflow in Monolith games including (1) Alien versus Predator 2 1.0.9.6 and earlier, (2) Blood 2 2.1 and earlier, (3) No one lives forever 1.004 and earlier and (4) Shogo 2.2 and earlier allows remote attackers to cause a denial of service (application crash) via a long…
CVE-2004-1588	Gosmart Gosmart Message Board	0.00	—	0.01	Dec 31, 2004	SQL injection vulnerability in GoSmart Message Board allows remote attackers to execute arbitrary SQL code via the (1) QuestionNumber and Category parameters to Forum.asp or (2) Username and Password parameter to Login_Exec.asp.
CVE-2004-1589	Gosmart Gosmart Message Board	0.00	—	0.00	Dec 31, 2004	Cross-site scripting (XSS) vulnerability in GoSmart Message Board allows remote attackers to execute inject web script or HTML via the (1) Category parameter to Forum.asp or (2) MainMessageID parameter to ReplyToQuestion.asp.

CVE-2004-1540Dec 31, 2004
Zyxel
Prestige
risk 0.03cvss —epss 0.05
ZyXEL Prestige 623, 650, and 652 HW Routers, and possibly other versions, with HTTP Remote Administration enabled, does not require a password to access rpFWUpload.html, which allows remote attackers to reset the router configuration file.
CVE-2004-1541Dec 31, 2004
Van Dyke Technologies
Securecrt
risk 0.00cvss —epss 0.01
SecureCRT 4.0, 4.1, and possibly other versions, allows remote attackers to execute arbitrary commands via a telnet:// URL that uses the /F option to specify a configuration file on a samba share.
CVE-2004-1542Dec 31, 2004
Soldier of Fortune II
Soldier of Fortune II
risk 0.03cvss —epss 0.06
Buffer overflow in Soldier of Fortune II 1.03 Gold and earlier allows remote attackers to cause a denial of service (server or client crash) via a long (1) query or (2) reply.
CVE-2004-1543Dec 31, 2004
Korweblog
Korweblog
risk 0.03cvss —epss 0.06
Directory traversal vulnerability in viewimg.php in KorWeblog 1.6.2-cvs and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in the path parameter.
CVE-2004-1544Dec 31, 2004
Jspwiki
Jspwiki
risk 0.00cvss —epss 0.00
Cross-site scripting (XSS) vulnerability in Search.jsp in JSPWiki 2.1.120-cvs and earlier allows remote attackers to execute arbitrary web script as other users via the query parameter.
CVE-2004-1545Dec 31, 2004
Moniwiki
Moniwiki
risk 0.00cvss —epss 0.02
UploadFile.php in MoniWiki 1.0.9.2 and earlier, when used with Apache mod_mime, does not properly handle files with two file extensions, such as .php.hwp, which allows remote attackers to upload and execute arbitrary code.
CVE-2004-1546Dec 31, 2004
Alt N
Mdaemon
risk 0.07cvss —epss 0.49
Multiple buffer overflows in MDaemon 6.5.1 allow remote attackers to cause a denial of service (application crash) via a long (1) SAML, SOML, SEND, or MAIL command to the SMTP server or (2) LIST command to the IMAP server.
CVE-2004-1547Dec 31, 2004
Onnuri Infotek
Activepost Standard
risk 0.00cvss —epss 0.02
The file server in ActivePost Standard 3.1 and earlier allows remote authenticated users to cause a denial of service (application crash) via a long filename, possibly triggering a buffer overflow.
CVE-2004-1548Dec 31, 2004
Onnuri Infotek
Activepost Standard
risk 0.00cvss —epss 0.02
Directory traversal vulnerability in the file server in ActivePost Standard 3.1 allows remote authenticated users to upload arbitrary files via a .. (dot dot) in the filename.
CVE-2004-1549Dec 31, 2004
Onnuri Infotek
Activepost Standard
risk 0.00cvss —epss 0.01
The conference menu in ActivePost Standard 3.1 sends passwords of password-protected rooms in cleartext, which could allow remote attackers to gain sensitive information by sniffing the network connection.
CVE-2004-1550Dec 31, 2004
Motorola
Wr850g
risk 0.06cvss —epss 0.35
Motorola Wireless Router WR850G running firmware 4.03 allows remote attackers to bypass authentication, log on as an administrator, and obtain sensitive information by repeatedly making an HTTP request for ver.asp until an administrator logs on.
CVE-2004-1551Dec 31, 2004
paFileDB
paFileDB
risk 0.03cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in the (1) email or (2) file modules in paFileDB 3.1 Final allows remote attackers to execute arbitrary web script or HTML via the id parameter.
CVE-2004-1552Dec 31, 2004
Webcalendar
Webcalendar
risk 0.03cvss —epss 0.04
SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via (1) the username field on the login page or (2) the eventid parameter to calendar.asp.
CVE-2004-1553Dec 31, 2004
Fullrevolution
Aspwebalbum
risk 0.03cvss —epss 0.04
SQL injection vulnerability in aspWebAlbum allows remote attackers to execute arbitrary SQL statements via (1) the username field on the login page or (2) the cat parameter to album.asp. NOTE: it was later reported that vector 1 affects aspWebAlbum 3.2, and the vector involves…
CVE-2004-1554Dec 31, 2004
Alexphpteam
Alex Guestbook
risk 0.03cvss —epss 0.05
PHP remote file inclusion vulnerability in livre_include.php in @lex Guestbook allows remote attackers to execute arbitrary PHP code by modifying the chem_absolu parameter to reference a URL on a remote web server that contains the code.
CVE-2004-1555Dec 31, 2004
Infuseum
Asp Message Board
risk 0.03cvss —epss 0.02
Multiple SQL injection vulnerabilities in BroadBoard Instant ASP Message Board allow remote attackers to run arbitrary SQL commands via the (1) keywords parameter to search.asp, (2) handle parameter to profile.asp, (3) txtUserHandle parameter to reg2.asp or (4) txtUserEmail…
CVE-2004-1556Dec 31, 2004
Mywebserver
Mywebserver
risk 0.00cvss —epss 0.01
MyWebServer 1.0.3 allows remote attackers to cause a denial of service (application crash) via a large number of connections within a short time.
CVE-2004-1557Dec 31, 2004
Mywebserver
Mywebserver
risk 0.00cvss —epss 0.01
MyWebServer 1.0.3 allows remote attackers to bypass authentication, modify configuration, and read arbitrary files via a direct HTTP request to (1) /admin or (2) ServerProperties.html.
CVE-2004-1558Dec 31, 2004
Ypops
Ypops
risk 0.10cvss —epss 0.86
Multiple stack-based buffer overflows in YPOPs! (aka YahooPOPS) 0.4 through 0.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) POP3 USER command or (2) SMTP request.
CVE-2004-1559Dec 31, 2004
WordPress
WordPress
risk 0.03cvss —epss 0.01
Multiple cross-site scripting (XSS) vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) redirect_to, text, popupurl, or popuptitle parameters to wp-login.php, (2) redirect_url parameter to admin-header.php, (3) popuptitle,…
CVE-2004-1560Dec 31, 2004
Microsoft
SQL Server
risk 0.04cvss —epss 0.14
Microsoft SQL Server 7.0 allows remote attackers to cause a denial of service (mssqlserver service halt) via a long request to TCP port 1433, possibly triggering a buffer overflow.
CVE-2004-1561Dec 31, 2004
Xiph.Org
Icecast
risk 0.10cvss —epss 0.82
Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a large number of headers.
CVE-2004-1562Dec 31, 2004
W Agora
W Agora
risk 0.03cvss —epss 0.01
SQL injection vulnerability in redir_url.php in w-Agora 4.1.6a allows remote attackers to execute arbitrary SQL commands via the key parameter.
CVE-2004-1563Dec 31, 2004
W Agora
W Agora
risk 0.03cvss —epss 0.01
Multiple cross-site scripting (XSS) vulnerabilities in w-Agora 4.1.6a allow remote attackers to execute arbitrary web script or HTML via the (1) thread parameter to download_thread.php, (2) loginuser parameter to login.php, or (3) userid parameter to forgot_password.php.
CVE-2004-1564Dec 31, 2004
W Agora
W Agora
risk 0.03cvss —epss 0.06
CRLF injection vulnerability in subscribe_thread.php in w-Agora 4.1.6a allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the thread parameter.
CVE-2004-1565Dec 31, 2004
W Agora
W Agora
risk 0.00cvss —epss 0.01
list.php in w-Agora 4.1.6a allows remote attackers to reveal the full path via a crafted HTTP request, possibly involving a malformed id parameter.
CVE-2004-1566Dec 31, 2004
Silent Storm
Silent Storm Portal
risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in index.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to execute arbitrary web script or HTML via the module parameter.
CVE-2004-1567Dec 31, 2004
Silent Storm
Silent Storm Portal
risk 0.03cvss —epss 0.06
profile.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to gain privileges by setting the mail parameter to 1, which is the value for an administrator.
CVE-2004-1568Dec 31, 2004
Parachat
Parachat Server
risk 0.00cvss —epss 0.01
Directory traversal vulnerability in ParaChat Server 5.5 allows remote attackers to read arbitrary files via a ..%5C (hex-encoded dot dot) in the URL.
CVE-2004-1569Dec 31, 2004
Illustrate
Dbpoweramp Audio Player
risk 0.04cvss —epss 0.13
Buffer overflow in (1) MusicConverter.exe, (2) playlist.exe, and (3) amp.exe in dBpowerAMP Audio Player 2.0 and dbPowerAmp Music Converter 10.0 allows remote attackers to cause a denial of service or execute arbitrary code via a .pls or .m3u playlist that contains long File1…
CVE-2004-1570Dec 31, 2004
Bblog
Bblog
risk 0.00cvss —epss 0.01
SQL injection vulnerability in bBlog 0.7.2 and 0.7.3 allows remote attackers to execute arbitrary SQL commands via the p parameter.
CVE-2004-1571Dec 31, 2004
Aj Fork
Aj Fork
risk 0.00cvss —epss 0.01
AJ-Fork 167 allows remote attackers to gain sensitive information via a direct request to (1) auto-acronyms.php, (2) auto-archive.php, (3) ount-article-views.php, (4) kses.php, (5) custom-quick-tags.php, (6) disable-all-comments.php, (7) easy-date-format.php, (8)…
CVE-2004-1572Dec 31, 2004
Aj Fork
Aj Fork
risk 0.00cvss —epss 0.01
AJ-Fork 167 does not restrict access to directories such as (1) data, (2) inc, (3) plugins, (4) skins, or (5) tools, which allows remote attackers to list files in those directories via a direct HTTP request.
CVE-2004-1573Dec 31, 2004
Cutephp
Cutenews
risk 0.00cvss —epss 0.00
The documentation for AJ-Fork 167 implies that users should set permissions for users.db.php to 777, which allows local users to execute arbitrary PHP code and gain privileges as the administrator.
CVE-2004-1574Dec 31, 2004
Novell
Messenger
risk 0.01cvss —epss 0.07
Buffer overflow in Vypress Messenger 3.5.1 and earlier allows remote attackers to execute arbitrary code via a message with a long first field.
CVE-2004-1575Dec 31, 2004
Xerces-C++
Xerces-C++
risk 0.00cvss —epss 0.03
The XML parser in Xerces-C++ 2.5.0 allows remote attackers to cause a denial of service (CPU consumption) via XML attributes in a crafted XML document.
CVE-2004-1576Dec 31, 2004
risk 0.00cvss —epss 0.01
Format string vulnerability in Judge Dredd: Dredd vs. Death 1.01 and earlier allows remote attackers to cause a denial of service (application crash) via format string specifiers in a chat message.
CVE-2004-1577Dec 31, 2004
Greg Donald
Phplinks
risk 0.00cvss —epss 0.00
index.php in PHP Links allows remote attackers to gain sensitive information via an invalid show parameter, which reveals the full path in an error message.
CVE-2004-1578Dec 31, 2004
Invision Power Services
Invision Power Board
risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in index.php in Invision Power Board 2.0.0 allows remote attackers to execute arbitrary web script or HTML via the Referer field in the HTTP header.
CVE-2004-1579Dec 31, 2004
Cubecart
Cubecart
risk 0.00cvss —epss 0.00
index.php in CubeCart 2.0.1 allows remote attackers to gain sensitive information via an HTTP request with an invalid cat_id parameter, which reveals the full path in a PHP error message.
CVE-2004-1580Dec 31, 2004
Cubecart
Cubecart
risk 0.03cvss —epss 0.01
SQL injection vulnerability in index.php in CubeCart 2.0.1 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.
CVE-2004-1581Dec 31, 2004
Blackboard
Blackboard
risk 0.00cvss —epss 0.00
BlackBoard 1.5.1 allows remote attackers to gain sensitive information via a direct request to (1) checkdb.inc.php, (2) admin.inc.php or (3) cp.inc.php, which reveals the path in a PHP error message.
CVE-2004-1582Dec 31, 2004
Blackboard
Blackboard
risk 0.00cvss —epss 0.01
PHP remote file inclusion vulnerability in BlackBoard 1.5.1 allows remote attackers to execute arbitrary PHP code by modifying the libpath parameter (incorrectly called "libpach") to reference a URL on a remote web server that contains _more.php, as demonstrated using…
CVE-2004-1583Dec 31, 2004
Tridcomm
Tridcomm
risk 0.00cvss —epss 0.01
Directory traversal vulnerability in the FTP server in TriDComm 1.3 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in FTP commands such as (1) DIR, (2) GET, or (3) PUT.
CVE-2004-1584Dec 31, 2004
WordPress
WordPress
risk 0.04cvss —epss 0.16
CRLF injection vulnerability in wp-login.php in WordPress 1.2 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the text parameter.
CVE-2004-1585Dec 31, 2004
Jera Technology
Flash Messaging Server
risk 0.03cvss —epss 0.06
Flash Messaging 5.2.0g (rev 1.1.2) and earlier allows remote attackers to cause a denial of service (application crash) via certain wide characters.
CVE-2004-1586Dec 31, 2004
Jera Technology
Flash Messaging Server
risk 0.00cvss —epss 0.00
Flash Messaging clients can ignore disconnecting commands such as "shutdown" from the Flash Messaging Server 5.2.0g (rev 1.1.2), which could allow remote attackers to stay connected.
CVE-2004-1587Dec 31, 2004
Monolith Productions
Alien Versus Predator
risk 0.04cvss —epss 0.12
Buffer overflow in Monolith games including (1) Alien versus Predator 2 1.0.9.6 and earlier, (2) Blood 2 2.1 and earlier, (3) No one lives forever 1.004 and earlier and (4) Shogo 2.2 and earlier allows remote attackers to cause a denial of service (application crash) via a long…
CVE-2004-1588Dec 31, 2004
Gosmart
Gosmart Message Board
risk 0.00cvss —epss 0.01
SQL injection vulnerability in GoSmart Message Board allows remote attackers to execute arbitrary SQL code via the (1) QuestionNumber and Category parameters to Forum.asp or (2) Username and Password parameter to Login_Exec.asp.
CVE-2004-1589Dec 31, 2004
Gosmart
Gosmart Message Board
risk 0.00cvss —epss 0.00
Cross-site scripting (XSS) vulnerability in GoSmart Message Board allows remote attackers to execute inject web script or HTML via the (1) Category parameter to Forum.asp or (2) MainMessageID parameter to ReplyToQuestion.asp.