Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2004-1555
Multiple SQL injection vulnerabilities in BroadBoard Instant ASP Message Board allow remote attackers to run arbitrary SQL commands via the (1) keywords parameter to search.asp, (2) handle parameter to profile.asp, (3) txtUserHandle parameter to reg2.asp or (4) txtUserEmail parameter to forgot.asp.
Affected Products: n/a
References: [{'name': '1011419', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011419'}, {'name': 'broadboard-forgotasp-sql-injection(17502)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17502'}, {'name': 'broadboard-profileasp-sql-injection(17500)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17500'}, {'name': 'broadboard-searchasp-sql-injection(17498)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17498'}, {'name': '20040926 SQL injection in BroadBoard Instant ASP Message Board', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109630777608244&w=2'}, {'name': '11250', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11250'}, {'name': '12658', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12658'}, {'name': 'broadboard-reg2asp-sql-injection(17501)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17501'}]
CVE State: PUBLISHED
Explain CVE-2004-1556
MyWebServer 1.0.3 allows remote attackers to cause a denial of service (application crash) via a large number of connections within a short time.
Affected Products: n/a
References: [{'name': 'mywebserver-mult-connections-dos(17519)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17519'}, {'name': '11254', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11254'}, {'name': '1011461', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011461'}, {'name': '12689', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12689'}, {'name': '20040927 MyWebServer 1.0.3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109630333230707&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-1557
MyWebServer 1.0.3 allows remote attackers to bypass authentication, modify configuration, and read arbitrary files via a direct HTTP request to (1) /admin or (2) ServerProperties.html.
Affected Products: n/a
References: [{'name': '11254', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11254'}, {'name': 'mywebserver-admin-access(17520)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17520'}, {'name': '1011461', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011461'}, {'name': '20040927 MyWebServer 1.0.3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109630333230707&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-1558
Multiple stack-based buffer overflows in YPOPs! (aka YahooPOPS) 0.4 through 0.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) POP3 USER command or (2) SMTP request.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://dbeusee.home.comcast.net/history.html'}, {'name': '10366', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/10366'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hat-squad.com/en/000075.html'}, {'name': '20040927 [Hat-Squad] Remote Buffer overflow Vulnerability in YahooPOPS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109630699829536&w=2'}, {'name': '10367', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/10367'}, {'name': 'ypops-smtp-bo(17518)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17518'}, {'name': '1011426', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/alerts/2004/Sep/1011426.html'}, {'name': '12660', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12660'}, {'name': 'ypops-pop3-bo(17515)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17515'}, {'name': '20061020 vendor ACK for old YPOPs! issue', 'tags': ['mailing-list', 'x_refsource_VIM'], 'url': 'http://www.attrition.org/pipermail/vim/2006-October/001089.html'}, {'name': '11256', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11256'}]
CVE State: PUBLISHED
Explain CVE-2004-1559
Multiple cross-site scripting (XSS) vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) redirect_to, text, popupurl, or popuptitle parameters to wp-login.php, (2) redirect_url parameter to admin-header.php, (3) popuptitle, popupurl, content, or post_title parameters to bookmarklet.php, (4) cat_ID parameter to categories.php, (5) s parameter to edit.php, or (6) s or mode parameter to edit-comments.php.
Affected Products: n/a
References: [{'name': 'wordpress-multiple-scripts-xss(17532)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17532'}, {'name': '12683', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12683'}, {'name': '20040927 Multiple XSS Vulnerabilities in Wordpress 1.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109641484723194&w=2'}, {'name': '11268', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11268'}, {'name': '1011440', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011440'}]
CVE State: PUBLISHED
Explain CVE-2004-1560
Microsoft SQL Server 7.0 allows remote attackers to cause a denial of service (mssqlserver service halt) via a long request to TCP port 1433, possibly triggering a buffer overflow.
Affected Products: n/a
References: [{'name': '20040928 MSSQL 7.0 DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109650760210411&w=2'}, {'name': 'mssql-data-buffer-dos(17542)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17542'}, {'name': '11265', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11265'}, {'name': '12680', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12680'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.nl/0410-exploits/mssql.7.0.dos.c'}, {'name': '1011434', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011434'}]
CVE State: PUBLISHED
Explain CVE-2004-1561
Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a large number of headers.
Affected Products: n/a
References: [{'name': '11271', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11271'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/iceexec-adv.txt'}, {'name': '12666', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12666/'}, {'name': '1011439', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011439'}, {'name': '20040928 Code execution in Icecast 2.0.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109640005127644&w=2'}, {'name': '10446', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/10446'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/exploits/6X00315BFM.html'}, {'name': '20041002 Re:2. Code execution in Icecast 2.0.1(exploit with shellcode)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109674593230539&w=2'}, {'name': 'icecast-http-bo(17538)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17538'}]
CVE State: PUBLISHED
Explain CVE-2004-1562
SQL injection vulnerability in redir_url.php in w-Agora 4.1.6a allows remote attackers to execute arbitrary SQL commands via the key parameter.
Affected Products: n/a
References: [{'name': 'wagora-redirurl-sql-injection(17557)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17557'}, {'name': '1011463', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011463'}, {'name': '12695', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12695'}, {'name': '11283', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11283'}, {'name': '20040930 Multiple vulnerabilities in w-agora forum', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109655691512298&w=2'}, {'name': '20040930 Multiple vulnerabilities in w-agora forum', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/027040.html'}]
CVE State: PUBLISHED
Explain CVE-2004-1563
Multiple cross-site scripting (XSS) vulnerabilities in w-Agora 4.1.6a allow remote attackers to execute arbitrary web script or HTML via the (1) thread parameter to download_thread.php, (2) loginuser parameter to login.php, or (3) userid parameter to forgot_password.php.
Affected Products: n/a
References: [{'name': 'wagora-get-post-xss(17553)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17553'}, {'name': '1011463', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011463'}, {'name': '12695', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12695'}, {'name': '11283', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11283'}, {'name': '20040930 Multiple vulnerabilities in w-agora forum', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109655691512298&w=2'}, {'name': '20040930 Multiple vulnerabilities in w-agora forum', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/027040.html'}]
CVE State: PUBLISHED
Explain CVE-2004-1564
CRLF injection vulnerability in subscribe_thread.php in w-Agora 4.1.6a allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the thread parameter.
Affected Products: n/a
References: [{'name': 'wagora-response-splitting(17558)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17558'}, {'name': '1011463', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011463'}, {'name': '12695', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12695'}, {'name': '11283', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11283'}, {'name': '20040930 Multiple vulnerabilities in w-agora forum', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109655691512298&w=2'}, {'name': '20040930 Multiple vulnerabilities in w-agora forum', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/027040.html'}]
CVE State: PUBLISHED
Explain CVE-2004-1565
list.php in w-Agora 4.1.6a allows remote attackers to reveal the full path via a crafted HTTP request, possibly involving a malformed id parameter.
Affected Products: n/a
References: [{'name': '1011463', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011463'}, {'name': '12695', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12695'}, {'name': '11283', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11283'}, {'name': '20040930 Multiple vulnerabilities in w-agora forum', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109655691512298&w=2'}, {'name': '20040930 Multiple vulnerabilities in w-agora forum', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/027040.html'}]
CVE State: PUBLISHED
Explain CVE-2004-1566
Cross-site scripting (XSS) vulnerability in index.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to execute arbitrary web script or HTML via the module parameter.
Affected Products: n/a
References: [{'name': '11284', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11284'}, {'name': 'silent-storm-xss(17554)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17554'}, {'name': '1011470', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011470'}, {'name': '20040930 Multiple Vulnerabilities in Silent Storm Portal', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109655763808924&w=2'}, {'name': '12704', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12704'}]
CVE State: PUBLISHED
Explain CVE-2004-1567
profile.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to gain privileges by setting the mail parameter to 1, which is the value for an administrator.
Affected Products: n/a
References: [{'name': '11284', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11284'}, {'name': '1011470', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011470'}, {'name': 'silent-storm-gain-admin(17555)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17555'}, {'name': '20040930 Multiple Vulnerabilities in Silent Storm Portal', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109655763808924&w=2'}, {'name': '12704', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12704'}]
CVE State: PUBLISHED
Explain CVE-2004-1568
Directory traversal vulnerability in ParaChat Server 5.5 allows remote attackers to read arbitrary files via a ..%5C (hex-encoded dot dot) in the URL.
Affected Products: n/a
References: [{'name': '20040930 Re: directory traversal in ParaChat Server 5.5', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109656982803391&w=2'}, {'name': '12678', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12678/'}, {'name': '20040928 directory traversal in ParaChat Server 5.5', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2004-09/1047.html'}, {'name': '11272', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11272'}, {'name': '20040929 directory traversal in ParaChat Server 5.5', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109647769526696&w=2'}, {'name': '1011438', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011438'}, {'name': '10436', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/10436'}, {'name': 'parachat-directory-traversal(17541)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17541'}, {'name': '20040929 Re: directory traversal in ParaChat Server 5.5', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2004-09/1063.html'}]
CVE State: PUBLISHED
Explain CVE-2004-1569
Buffer overflow in (1) MusicConverter.exe, (2) playlist.exe, and (3) amp.exe in dBpowerAMP Audio Player 2.0 and dbPowerAmp Music Converter 10.0 allows remote attackers to cause a denial of service or execute arbitrary code via a .pls or .m3u playlist that contains long File1 (filename) fields.
Affected Products: n/a
References: [{'name': '20040930 dbPowerAmp Buffer Overflow And Dos Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109668542406346&w=2'}, {'name': '11266', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11266'}, {'name': 'dbpoweramp-converter-filename-bo(17539)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17539'}, {'name': '12684', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12684/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gulftech.org/?node=research&article_id=00052-09272004'}, {'name': 'dbpoweramp-player-filename-bo(17535)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17535'}]
CVE State: PUBLISHED
Explain CVE-2004-1570
SQL injection vulnerability in bBlog 0.7.2 and 0.7.3 allows remote attackers to execute arbitrary SQL commands via the p parameter.
Affected Products: n/a
References: [{'name': '20041001 SQL Injection vulnerability in bBlog 0.7.3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109665351632048&w=2'}, {'name': '12691', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12691'}, {'name': '11303', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11303'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.servers.co.nz/security/SCN200409-1.php'}, {'name': 'bblog-array-sql-injection(17552)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17552'}]
CVE State: PUBLISHED
Explain CVE-2004-1571
AJ-Fork 167 allows remote attackers to gain sensitive information via a direct request to (1) auto-acronyms.php, (2) auto-archive.php, (3) ount-article-views.php, (4) kses.php, (5) custom-quick-tags.php, (6) disable-all-comments.php, (7) easy-date-format.php, (8) enable-disable-comments.php, (9) filter-by-author.php, (10) format-switcher.php, (11) long-to-short.php, (12) prospective-posting.php, or (13) sort-by-xfield.php, which displays the full path in an error message.
Affected Products: n/a
References: [{'name': 'aj-fork-path-disclosure(17568)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17568'}, {'tags': ['x_refsource_MISC'], 'url': 'http://echo.or.id/adv/adv07-y3dips-2004.txt'}, {'name': '20041001 Multiple Vulnerabilities in AJ-Fork', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109664986210763&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-1572
AJ-Fork 167 does not restrict access to directories such as (1) data, (2) inc, (3) plugins, (4) skins, or (5) tools, which allows remote attackers to list files in those directories via a direct HTTP request.
Affected Products: n/a
References: [{'name': '11301', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11301'}, {'name': '1011484', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011484'}, {'name': 'af-fork-directory-disclosure(17569)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17569'}, {'tags': ['x_refsource_MISC'], 'url': 'http://echo.or.id/adv/adv07-y3dips-2004.txt'}, {'name': '20041001 Multiple Vulnerabilities in AJ-Fork', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109664986210763&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-1573
The documentation for AJ-Fork 167 implies that users should set permissions for users.db.php to 777, which allows local users to execute arbitrary PHP code and gain privileges as the administrator.
Affected Products: n/a
References: [{'name': '11301', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11301'}, {'name': '1011484', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011484'}, {'tags': ['x_refsource_MISC'], 'url': 'http://echo.or.id/adv/adv07-y3dips-2004.txt'}, {'name': '20041001 Multiple Vulnerabilities in AJ-Fork', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109664986210763&w=2'}, {'name': 'aj-fork-usersdbphp-write-access(17571)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17571'}]
CVE State: PUBLISHED
Explain CVE-2004-1574
Buffer overflow in Vypress Messenger 3.5.1 and earlier allows remote attackers to execute arbitrary code via a message with a long first field.
Affected Products: n/a
References: [{'name': '11310', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11310'}, {'name': '12605', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12605'}, {'name': 'vypress-visual-bo(17572)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17572'}, {'name': '1011489', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011489'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/vymesbof-adv.txt'}, {'name': '10451', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/10451'}, {'name': '20041001 Broadcast buffer-overflow in Vypress Messenger 3.5.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109665993315769&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-1575
The XML parser in Xerces-C++ 2.5.0 allows remote attackers to cause a denial of service (CPU consumption) via XML attributes in a crafted XML document.
Affected Products: n/a
References: [{'name': '20041002 Security advisory - Xerces-C++ 2.5.0: Attribute blowup', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109674050017645&w=2'}, {'name': '12715', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12715'}, {'name': 'xercescplusplus-xml-parser-dos(17575)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17575'}, {'name': '11312', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11312'}]
CVE State: PUBLISHED
Explain CVE-2004-1576
Format string vulnerability in Judge Dredd: Dredd vs. Death 1.01 and earlier allows remote attackers to cause a denial of service (application crash) via format string specifiers in a chat message.
Affected Products: n/a
References: [{'name': 'judge-dredd-death-format-string(17579)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17579'}, {'name': '12710', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12710'}, {'name': '20041002 In-game format string in Judge Dredd vs. Death 1.01', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109674541519610&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-1577
index.php in PHP Links allows remote attackers to gain sensitive information via an invalid show parameter, which reveals the full path in an error message.
Affected Products: n/a
References: [{'name': '20041003 Full path disclosure in PHP Links', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109693280416747&w=2'}, {'name': 'phplinks-path-disclosure(17588)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17588'}]
CVE State: PUBLISHED
Explain CVE-2004-1578
Cross-site scripting (XSS) vulnerability in index.php in Invision Power Board 2.0.0 allows remote attackers to execute arbitrary web script or HTML via the Referer field in the HTTP header.
Affected Products: n/a
References: [{'name': '12740', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12740'}, {'name': 'invision-referer-header-xss(17604)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17604'}, {'name': '11332', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11332'}, {'name': '20041005 [MAXPATROL Security Advisories] Cross site scripting in Invision Power Board', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109701091207517&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-1579
index.php in CubeCart 2.0.1 allows remote attackers to gain sensitive information via an HTTP request with an invalid cat_id parameter, which reveals the full path in a PHP error message.
Affected Products: n/a
References: [{'name': '20041006 Full path disclosure and sql injection on CubeCart 2.0.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109713382400457&w=2'}, {'name': 'cubecart-catid-path-disclosure(17630)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17630'}]
CVE State: PUBLISHED
Explain CVE-2004-1580
SQL injection vulnerability in index.php in CubeCart 2.0.1 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.
Affected Products: n/a
References: [{'name': '20041006 Full path disclosure and sql injection on CubeCart 2.0.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109713382400457&w=2'}, {'name': '11337', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11337'}, {'name': '12764', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12764'}, {'name': '15278', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/15278'}, {'name': 'cubecart-catid-sql-injection(17632)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17632'}]
CVE State: PUBLISHED
Explain CVE-2004-1581
BlackBoard 1.5.1 allows remote attackers to gain sensitive information via a direct request to (1) checkdb.inc.php, (2) admin.inc.php or (3) cp.inc.php, which reveals the path in a PHP error message.
Affected Products: n/a
References: [{'name': 'blackboard-directory-traversal(17636)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17636'}, {'name': '20041006 Multiple vulnerabilities in BlackBoard', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109707701719659&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-1582
PHP remote file inclusion vulnerability in BlackBoard 1.5.1 allows remote attackers to execute arbitrary PHP code by modifying the libpath parameter (incorrectly called "libpach") to reference a URL on a remote web server that contains _more.php, as demonstrated using checkdb.inc.php.
Affected Products: n/a
References: [{'name': 'blackboard-lang-file-include(17637)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17637'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blackboard.unclassified.de/70%2C1#1031'}, {'name': '11336', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11336'}, {'name': '20041006 Multiple vulnerabilities in BlackBoard', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109707701719659&w=2'}, {'name': '12757', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12757'}]
CVE State: PUBLISHED
Explain CVE-2004-1583
Directory traversal vulnerability in the FTP server in TriDComm 1.3 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in FTP commands such as (1) DIR, (2) GET, or (3) PUT.
Affected Products: n/a
References: [{'name': '12755', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12755'}, {'name': '11343', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11343'}, {'name': 'tridcomm-dotdot-directory-traversal(17631)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17631'}, {'name': '20041006 Directory traversal in Tridcomm 1.3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109709637732276&w=2'}, {'name': '20041006 Directory traversal in Tridcomm 1.3', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027195.html'}]
CVE State: PUBLISHED
Explain CVE-2004-1584
CRLF injection vulnerability in wp-login.php in WordPress 1.2 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the text parameter.
Affected Products: n/a
References: [{'name': '20041006 HTTP Response Splitting Vulnerability in Wordpress 1.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109716327724041&w=2'}, {'name': '11348', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11348'}, {'name': '12773', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12773'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://wordpress.org/development/2004/10/wp-121/'}, {'name': 'GLSA-200410-12', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200410-12.xml'}, {'name': 'wordpress-response-splitting(17649)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17649'}]
CVE State: PUBLISHED
Explain CVE-2004-1585
Flash Messaging 5.2.0g (rev 1.1.2) and earlier allows remote attackers to cause a denial of service (application crash) via certain wide characters.
Affected Products: n/a
References: [{'name': 'flash-messaging-dos(17647)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17647'}, {'name': '20041007 Server crash in Flash Messaging 5.2.0g', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109716787607302&w=2'}, {'name': '1011569', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011569'}, {'name': '12759', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12759/'}, {'name': '11351', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11351'}]
CVE State: PUBLISHED
Explain CVE-2004-1586
Flash Messaging clients can ignore disconnecting commands such as "shutdown" from the Flash Messaging Server 5.2.0g (rev 1.1.2), which could allow remote attackers to stay connected.
Affected Products: n/a
References: [{'name': '20041007 Server crash in Flash Messaging 5.2.0g', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109716787607302&w=2'}, {'name': '1011569', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011569'}, {'name': '12759', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12759/'}]
CVE State: PUBLISHED
Explain CVE-2004-1587
Buffer overflow in Monolith games including (1) Alien versus Predator 2 1.0.9.6 and earlier, (2) Blood 2 2.1 and earlier, (3) No one lives forever 1.004 and earlier and (4) Shogo 2.2 and earlier allows remote attackers to cause a denial of service (application crash) via a long secure Gamespy query.
Affected Products: n/a
References: [{'name': '11354', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11354'}, {'name': 'shogo-long-query-bo(17670)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17670'}, {'name': '20041008 Limited \\secure\\ buffer-overflow in some old Monolith games', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109728194025487&w=2'}, {'name': '20041008 Limited \\secure\\ buffer-overflow in some old Monolith games', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=109727077824860&w=2'}, {'name': 'nolf-long-query-bo(17669)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17669'}, {'name': '12776', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12776/'}, {'name': '1011603', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/alerts/2004/Oct/1011603.html'}, {'name': 'avp2-long-query-bo(17665)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17665'}, {'name': 'blood2-long-query-bo(17668)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17668'}, {'name': '10635', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/displayvuln.php?osvdb_id=10635'}]
CVE State: PUBLISHED
Explain CVE-2004-1588
SQL injection vulnerability in GoSmart Message Board allows remote attackers to execute arbitrary SQL code via the (1) QuestionNumber and Category parameters to Forum.asp or (2) Username and Password parameter to Login_Exec.asp.
Affected Products: n/a
References: [{'name': 'gosmart-forum-loginexec-sql-injection(17678)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17678'}, {'name': '20041011 [MAxpatrol Security Advisory]  Multiple vulnerabilities in GoSmart Message Board', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109751522823011&w=2'}, {'name': '11361', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11361'}, {'name': '12790', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12790/'}]
CVE State: PUBLISHED
Explain CVE-2004-1589
Cross-site scripting (XSS) vulnerability in GoSmart Message Board allows remote attackers to execute inject web script or HTML via the (1) Category parameter to Forum.asp or (2) MainMessageID parameter to ReplyToQuestion.asp.
Affected Products: n/a
References: [{'name': 'gosmart-forum-mainmessageid-xss(17679)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17679'}, {'name': '20041011 [MAxpatrol Security Advisory]  Multiple vulnerabilities in GoSmart Message Board', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109751522823011&w=2'}, {'name': '11361', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11361'}, {'name': '12790', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12790/'}]
CVE State: PUBLISHED
Explain CVE-2004-1590
Clientexec allows remote attackers to gain sensitive information via an HTTP request to phpinfo.php, which calls the phpinfo function.
Affected Products: n/a
References: [{'name': 'clientexec-phpinfo-info-disclosure(17741)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17741'}, {'name': '12862', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12862'}, {'name': '20041012 Clientexec Billing Software', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109787365801512&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-1591
The web interface for Micronet Wireless Broadband Router SP916BM running firmware before 1.9 08/04/2004 resets the password to the default password when the router is shut off, which could allow remote attackers to gain access.
Affected Products: n/a
References: [{'name': 'micronet-router-password-reset(17697)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17697'}, {'name': '20041012 Micronet wireless broadband router SP916BM admin password reset when power off', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109759963126161&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-1592
PHP remote file inclusion vulnerability in index.php in ocPortal 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the req_path parameter to reference a URL on a remote web server that contains a malicious funcs.php script.
Affected Products: n/a
References: [{'name': '12811', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12811/'}, {'name': 'ocportal-reqpath-file-include(17699)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17699'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hackgen.org/advisories/hackgen-2004-002.txt'}, {'name': '11368', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11368'}, {'name': '20041012 [hackgen-2004-#002] - Remote file inclusion bug in ocPortal 1.0.3.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109763314312828&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-1593
Cross-site scripting (XSS) vulnerability in render.UserLayoutRootNode.uP in SCT Campus Pipeline allows remote attackers to inject arbitrary web script or HTML via the utf parameter.
Affected Products: n/a
References: [{'name': 'sct-campus-userlayoutrootnode-xss(17704)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17704'}, {'name': '20041013 XXS in SCT email client', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109768337007983&w=2'}, {'name': '12826', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12826'}, {'name': '11392', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11392'}]
CVE State: PUBLISHED
Explain CVE-2004-1594
Cross-site scripting (XSS) vulnerability in FuseTalk 4.0 allows remote attackers to execute arbitrary web script via an img src tag.
Affected Products: n/a
References: [{'name': '20041013 XXS in fusetalk forum', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109768460312168&w=2'}, {'name': '11393', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11393'}, {'name': '12823', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12823'}, {'name': 'fusetalk-imgsrc-xss(17701)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17701'}]
CVE State: PUBLISHED
Explain CVE-2004-1595
Buffer overflow in ShixxNote 6.net build 117 allows remote attackers to execute arbitrary code via a long font field.
Affected Products: n/a
References: [{'name': '12822', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12822/'}, {'name': '11409', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11409'}, {'name': '20041013 Buffer-overflow in ShixxNOTE 6.net', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109778648232233&w=2'}, {'name': 'shixxnote-font-bo(17705)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17705'}]
CVE State: PUBLISHED
Explain CVE-2004-1596
The 3COM Wireless router 3CRADSL72 running Boot Code 1.3d allows remote attackers to gain sensitive information such as passwords and router settings via a direct HTTP request to app_sta.stm.
Affected Products: n/a
References: [{'name': '3com-officeconnect-obtain-info(17723)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17723'}, {'name': '20041015 Re: 3COM Wireless router (3CRADSL72) information disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109810854031673&w=2'}, {'name': '11408', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11408'}, {'name': '20041013 3COM Wireless router (3CRADSL72) information disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109778914829901&w=2'}, {'name': '20041015 More details on BID 11408 (3com 3cradsl72 wireless router)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/378551'}]
CVE State: PUBLISHED
Explain CVE-2004-1597
RIM Blackberry 7230 running RIM Blackberry OS 3.7 SP1 allows remote attackers to cause a denial of service (device reboot and possibly data corruption) via a calendar message with a long Location field, which triggers a watchdog while the message is being stored.
Affected Products: n/a
References: [{'name': '20041012 [HV-HIGH] RIM Blackberry buffer overflow, DoS, data loss', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027487.html'}, {'name': '12814', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12814'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.blackberry.com/knowledgecenterpublic/livelink.exe/fetch/2000/8021/7925/8142/Known_%20Issues_-_HexView_advisory_on_BlackBerry_buffer_overflow%2C_DoS%2C_and_data_loss.html?nodeid=737173&vernum=0'}, {'name': '20041014 [HV-MED] UPDATE: RIM Blackberry DoS, data loss', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109778267829493&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hexview.com/docs/20041012-1.txt'}, {'name': '20041013 [HV-HIGH] RIM Blackberry buffer overflow, DoS, data loss', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109769022430842&w=2'}, {'name': '11389', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11389'}, {'name': 'blackberry-calendar-bo(17700)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17700'}]
CVE State: PUBLISHED
Explain CVE-2004-1598
Adobe Acrobat and Acrobat Reader 6.0 allow remote attackers to read arbitrary files via a PDF file that contains an embedded Shockwave (swf) file that references files outside of the temporary directory.
Affected Products: n/a
References: [{'name': '20041015 Re: Adobe acrobat / Adobe Reader 6 can read local files', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109812210520520&w=2'}, {'name': 'adobe-acrobat-swf-read-files(17694)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17694'}, {'name': '20041014 Re: Adobe acrobat / Adobe Reader 6 can read local files', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109779541602447&w=2'}, {'name': '11386', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11386'}, {'name': '20041012 Adobe acrobat / Adobe Reader 6 can read local files', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109771686326956&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-1599
Cross-site scripting (XSS) vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to execute arbitrary web script or HTML via the (1) query or (2) nick parameters.
Affected Products: n/a
References: [{'name': '12850', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12850'}, {'name': 'coolphp-multiple-xss(17742)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17742'}, {'name': '11437', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11437'}, {'name': '20041016 Multiple Vulnerabilities in CoolPHP', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109810941419669&w=2'}, {'name': '1011748', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011748'}]
CVE State: PUBLISHED
Explain CVE-2004-1600
index.php in CoolPHP 1.0-stable allows remote attackers to gain sensitive information via an invalid op parameter, which reveals the path in an error message.
Affected Products: n/a
References: [{'name': '12850', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12850'}, {'name': 'coolphp-path-disclosure(17744)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17744'}, {'name': '20041016 Multiple Vulnerabilities in CoolPHP', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109810941419669&w=2'}, {'name': '1011748', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011748'}]
CVE State: PUBLISHED
Explain CVE-2004-1601
Directory traversal vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to access arbitrary files and execute local PHP scripts via a .. (dot dot) in the op parameter.
Affected Products: n/a
References: [{'name': '12850', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12850'}, {'name': '11437', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11437'}, {'name': '20041016 Multiple Vulnerabilities in CoolPHP', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109810941419669&w=2'}, {'name': 'coolphp-dotdot-directory-traversal(17745)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17745'}, {'name': '1011748', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011748'}]
CVE State: PUBLISHED
Explain CVE-2004-1602
ProFTPD 1.2.x, including 1.2.8 and 1.2.10, responds in a different amount of time when a given username exists, which allows remote attackers to identify valid usernames by timing the server response.
Affected Products: n/a
References: [{'name': '1011687', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1011687'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02'}, {'name': '11430', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11430'}, {'name': 'proftpd-info-disclosure(17724)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17724'}, {'name': '20041015 ProFTPD 1.2.x remote users enumeration bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109786760926133&w=2'}]
CVE State: PUBLISHED