Total
210374 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2004-1504 | 1 Salims Softhouse | 1 Jaf Cms | 2017-07-10 | 5.0 MEDIUM | N/A |
| The displaycontent function in config.php for Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to gain sensitive information via a blank show parameter, which reveals the installation path in an error message, as demonstrated using index.php. | |||||
| CVE-2004-1505 | 1 Salims Softhouse | 1 Jaf Cms | 2017-07-10 | 7.5 HIGH | N/A |
| Directory traversal vulnerability in index.php in Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to read arbitrary files and possibly execute PHP code via a .. (dot dot) in the show parameter. | |||||
| CVE-2004-1506 | 1 Webcalendar | 1 Webcalendar | 2017-07-10 | 4.3 MEDIUM | N/A |
| Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar allow remote attackers to inject arbitrary web script via (1) view_entry.php, (2) view_d.php, (3) usersel.php, (4) datesel.php, (5) trailer.php, or (6) styles.php, as demonstrated using img srg tags. | |||||
| CVE-2004-1507 | 1 Webcalendar | 1 Webcalendar | 2017-07-10 | 5.0 MEDIUM | N/A |
| CRLF injection vulnerability in login.php in WebCalendar allows remote attackers to inject CRLF sequences via the return_path parameter and perform HTTP Response Splitting attacks to modify expected HTML content from the server. | |||||
| CVE-2004-1508 | 1 Webcalendar | 1 Webcalendar | 2017-07-10 | 7.5 HIGH | N/A |
| init.php in WebCalendar allows remote attackers to execute arbitrary local PHP scripts via the user_inc parameter. | |||||
| CVE-2004-1509 | 1 Webcalendar | 1 Webcalendar | 2017-07-10 | 5.0 MEDIUM | N/A |
| validate.php in WebCalendar allows remote attackers to gain sensitive information via an invalid encoded_login parameter, which reveals the full path in an error message. | |||||
| CVE-2004-1510 | 1 Webcalendar | 1 Webcalendar | 2017-07-10 | 7.5 HIGH | N/A |
| WebCalendar allows remote attackers to gain privileges by modifying critical parameters to (1) view_entry.php or (2) upcoming.php. | |||||
| CVE-2004-1511 | 1 Hotfoon Corporation | 1 Hotfoon | 2017-07-10 | 5.0 MEDIUM | N/A |
| Hotfoon 4.0 does not notify users before opening links in web browsers, which could allow remote attackers to execute arbitrary code via a certain link sent in a chat window. | |||||
| CVE-2004-1512 | 1 Soft3304 | 1 04webserver | 2017-07-10 | 4.3 MEDIUM | N/A |
| Cross-site scripting (XSS) vulnerability in Response_default.html in 04WebServer 1.42 allows remote attackers to execute arbitrary web script or HTML via script code in the URL, which is not quoted in the resulting default error page. | |||||
| CVE-2004-1513 | 1 Soft3304 | 1 04webserver | 2017-07-10 | 5.0 MEDIUM | N/A |
| 04WebServer 1.42 does not adequately filter data that is written to log files, which could allow remote attackers to inject carriage return characters into the log file and spoof log entries. | |||||
| CVE-2004-1514 | 1 Soft3304 | 1 04webserver | 2017-07-10 | 5.0 MEDIUM | N/A |
| 04WebServer 1.42 allows remote attackers to cause a denial of service (fail to restart properly) via an HTTP request for an MS-DOS device name such as COM2. | |||||
| CVE-2004-1516 | 1 Phpwebsite | 1 Phpwebsite | 2017-07-10 | 5.0 MEDIUM | N/A |
| CRLF injection vulnerability in index.php in phpWebSite 0.9.3-4 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the block_username parameter in the user module. | |||||
| CVE-2004-1518 | 1 Phorum | 1 Phorum | 2017-07-10 | 4.6 MEDIUM | N/A |
| SQL injection vulnerability in follow.php in Phorum 5.0.12 and earlier allows remote authenticated users to execute arbitrary SQL command via the forum_id parameter. | |||||
| CVE-2004-1519 | 1 Benjamin Curtis | 1 Phpbugtracker | 2017-07-10 | 7.5 HIGH | N/A |
| SQL injection vulnerability in bug.php in phpBugTracker 0.9.1 allows remote attackers to execute arbitrary SQL commands via (1) the bug_id parameter in a viewvotes operation or (2) the project parameter in an add operation. | |||||
| CVE-2004-1520 | 1 Ipswitch | 1 Imail | 2017-07-10 | 4.6 MEDIUM | N/A |
| Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a long IMAP DELETE command. | |||||
| CVE-2004-1521 | 1 Qualcomm | 1 Eudora | 2017-07-10 | 5.0 MEDIUM | N/A |
| Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains base64 or quoted-printable encoded attachments, which makes it easier for remote attackers to read arbitrary files via spoofed "Converted" headers. | |||||
| CVE-2004-1522 | 1 3do | 1 Army Men Real Time Strategy Game | 2017-07-10 | 5.0 MEDIUM | N/A |
| Format string vulnerability in Army Men RTS 1.0 allows remote attackers to cause a denial of service (application crash) via a nickname that contains format strings. | |||||
| CVE-2004-1523 | 1 New Media Generation | 1 Hired Team Trial | 2017-07-10 | 5.0 MEDIUM | N/A |
| Format string vulnerability in the game console in Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service (application crash) via format string specifiers in a message. | |||||
| CVE-2004-1524 | 1 New Media Generation | 1 Hired Team Trial | 2017-07-10 | 5.0 MEDIUM | N/A |
| Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service (game interruption) via a malformed UDP packet sent to a game port, such as port 29200. | |||||
| CVE-2004-1525 | 1 New Media Generation | 1 Hired Team Trial | 2017-07-10 | 5.0 MEDIUM | N/A |
| Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service (application crash) via the status command. | |||||