deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2004-1773
Published: 2004-12-31
Description: Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.
CVSS Score: 7.5 (HIGH)
References: http://security.gentoo.org/glsa/glsa-200410-01.xml; http://www.redhat.com/support/errata/RHSA-2005-377.html; http://www.securityfocus.com/bid/11298
CVE: CVE-2004-1775
Published: 2004-12-31
Description: Cisco VACM (View-based Access Control MIB) for Catalyst Operating Software (CatOS) 5.5 and 6.1 and IOS 12.0 and 12.1 allows remote attackers to read and modify device configuration via the read-write community string.
CVSS Score: 5.0 (MEDIUM)
References: http://www.cisco.com/warp/public/707/ios-snmp-community-vulns-pub.shtml; http://www.kb.cert.org/vuls/id/645400; http://www.securityfocus.com/bid/5030
CVE: CVE-2004-1777
Published: 2004-12-31
Description: A "range check error" in Skype for Windows before 0.98.0.28 allows local and remote attackers to cause a denial of service (application crash) via long command line arguments or a long callto:// URL, a different vulnerability than CVE-2004-1114.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://lists.virus.org/bugtraq-0406/msg00221.html; http://securitytracker.com/id?1010490; http://www.osvdb.org/11860
CVE: CVE-2004-1779
Published: 2004-12-31
Description: Cross-site scripting (XSS) vulnerability in board.php for ThWboard before beta 2.84 allows remote attackers to inject arbitrary web script or HTML via the lastvisited parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://cvs.sourceforge.net/viewcvs.py/thwb/thwb/board.php?r1=1.11&r2=1.12; http://secunia.com/advisories/10546; http://securitytracker.com/id?1008617
CVE: CVE-2004-1780
Published: 2004-12-31
Description: Info Touch Surfnet kiosk allows local users to deposit extra time into Internet kiosk accounts via repeated authentication attempts.
CVSS Score: 4.6 (MEDIUM)
References: http://www.securityfocus.com/bid/9347; http://www.securityfocus.com/bid/9347
CVE: CVE-2004-1781
Published: 2004-12-31
Description: Info Touch Surfnet kiosk allows local users to crash Surfnet and access the underlying operating system via the CMD_CREDITCARD_CHARGE command.
CVSS Score: 4.6 (MEDIUM)
References: http://www.securityfocus.com/bid/9348; http://www.securityfocus.com/bid/9348
CVE: CVE-2004-1782
Published: 2004-12-31
Description: athenareg.php in Athena Web Registration allows remote attackers to execute arbitrary commands via shell metacharacters in the pass parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.osvdb.org/16861; http://www.securityfocus.com/bid/9349; http://www.osvdb.org/16861
CVE: CVE-2004-1783
Published: 2004-12-31
Description: Directory traversal vulnerability in Net2Soft Flash FTP Server 1.0 allows remote attackers to read and create arbitrary files via a /.. (slash dot dot).
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/10522; http://securitytracker.com/id?1008588; http://www.securiteam.com/windowsntfocus/5FP051FBPQ.html
CVE: CVE-2004-1787
Published: 2004-12-31
Description: SQL injection vulnerability in PostCalendar 4.0.0 allows remote attackers to execute arbitrary SQL commands via search queries.
CVSS Score: 7.5 (HIGH)
References: http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2537; http://secunia.com/advisories/10554; http://securitytracker.com/id?1008621
CVE: CVE-2004-1788
Published: 2004-12-31
Description: ASP-Nuke 1.3 and earlier places user credentials under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to main.mdb.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/bid/9355; http://www.securityfocus.com/bid/9355
CVE: CVE-2004-1789
Published: 2004-12-31
Description: Cross-site scripting (XSS) vulnerability in the web management interface in ZyWALL 10 4.07 allows remote attackers to inject arbitrary web script or HTML via the rpAuth_1 page.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/10574; http://securitytracker.com/id?1008644; http://www.osvdb.org/12793
CVE: CVE-2004-1790
Published: 2004-12-31
Description: Cross-site scripting (XSS) vulnerability in the web management interface in Edimax AR-6004 ADSL Routers allows remote attackers to inject arbitrary web script or HTML via the URL.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/10576; http://securitytracker.com/id?1008643; http://www.osvdb.org/3435
CVE: CVE-2004-1791
Published: 2004-12-31
Description: The web management interface in Edimax AR-6004 ADSL Routers uses a default administrator name and password, which also appear as the default login text for the management interface, which allows remote attackers to gain access.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1008643; http://www.osvdb.org/3511; http://www.securityfocus.com/archive/1/349089
CVE: CVE-2004-1792
Published: 2004-12-31
Description: swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a long packet with two CRLF sequences to the service management port (TCP 8000).
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/10521; http://securitytracker.com/id?1008581; http://www.elitehaven.net/switchoff.txt
CVE: CVE-2004-1793
Published: 2004-12-31
Description: Stack-based buffer overflow in swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to execute arbitrary code via a long message parameter in a SendMsg action to action.htm.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/10521; http://securitytracker.com/id?1008581; http://www.elitehaven.net/switchoff.txt
CVE: CVE-2004-1794
Published: 2004-12-31
Description: Cross-site scripting (XSS) vulnerability in the VCard4J Toolkit allows remote attackers to inject arbitrary web script or HTML via the NICKNAME tag in a vCard.
CVSS Score: 4.3 (MEDIUM)
References: http://securitytracker.com/id?1008582; http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-01/0006.html; http://www.securityfocus.com/bid/9343
CVE: CVE-2004-1795
Published: 2004-12-31
Description: Info Touch Surfnet kiosk allows local users to access the underlying filesystem via a 'file://' URI.
CVSS Score: 2.1 (LOW)
References: http://www.securityfocus.com/bid/9346; http://www.securityfocus.com/bid/9346
CVE: CVE-2004-1796
Published: 2004-12-31
Description: PHP remote file inclusion vulnerability in HotNews 0.7.2 and earlier allows remote attackers to execute arbitrary PHP code via the (1) config[header] parameter to hotnews-engine.inc.php3 or (2) config[incdir] parameter to hnmain.inc.php3.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/10551; http://securitytracker.com/id?1008608; http://sourceforge.net/forum/forum.php?forum_id=342594
CVE: CVE-2004-1797
Published: 2004-12-31
Description: Cross-site scripting (XSS) vulnerability in search.php for FreznoShop 1.3.0 RC1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/10547; http://securitytracker.com/id?1008606; http://www.freznoshop.com/changelog_en.htm
CVE: CVE-2004-1798
Published: 2004-12-31
Description: RealOne player 6.0.11.868 allows remote attackers to execute arbitrary script in the "My Computer" zone via a Synchronized Multimedia Integration Language (SMIL) presentation with a "file:javascript:" URL, which is executed in the security context of the previously loaded URL, a different vulnerability than CVE-2003-0726.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/9584; http://securitytracker.com/id?1008647; http://www.osvdb.org/3826
CVE: CVE-2004-1799
Published: 2004-12-31
Description: PF in certain OpenBSD versions, when stateful filtering is enabled, does not limit packets for a session to the original interface, which allows remote attackers to bypass intended packet filters via spoofed packets to other interfaces.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]2113&w=2; http://www.osvdb.org/19105; http://www.securityfocus.com/bid/9362
CVE: CVE-2004-1800
Published: 2004-12-31
Description: Unknown vulnerability in Sysbotz SimpleData 4.0.1 and possibly earlier versions allows remote attackers to gain access via a crafted URL and a certain cookie.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/10595; http://securitytracker.com/id?1008695; http://www.securityfocus.com/bid/9380
CVE: CVE-2004-1801
Published: 2004-12-31
Description: Directory traversal vulnerability in PWebServer 0.3.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1413&w=2; http://secunia.com/advisories/11057; http://www.autistici.org/fdonato/advisory/PWebServer0.3.3-adv.txt
CVE: CVE-2004-1802
Published: 2004-12-31
Description: Chat Anywhere 2.72 and earlier allows remote attackers to hide their IP address by using %00 before the nickname, which causes the IP address to be displayed as $IP$ on the administration web page.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/chatany-ghost-adv.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0895&w=2; http://www.lionmax.com/chatanywhere.htm
CVE: CVE-2004-1804
Published: 2004-12-31
Description: wMCam server 2.1.348 allows remote attackers to cause a denial of service (no new connections) via multiple malformed HTTP requests without the GET command.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4376&w=2; http://www.securityfocus.com/bid/9839; https://exchange.xforce.ibmcloud.com/vulnerabilities/15431
CVE: CVE-2004-1805
Published: 2004-12-31
Description: Format string vulnerability in games using the Epic Games Unreal Engine 436 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in class names.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/unrfs-adv.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6905&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4583&w=2
CVE: CVE-2004-1806
Published: 2004-12-31
Description: SQL injection vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers to execute SQL commands via the (1) category_id, (2) product_id, or (3) feature_id parameters.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1744&w=2; http://secunia.com/advisories/11112; http://securitytracker.com/id?1009403
CVE: CVE-2004-1807
Published: 2004-12-31
Description: Cross-site scripting (XSS) vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers to inject arbitrary web script or HTML via the URL.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1744&w=2; http://secunia.com/advisories/11112; http://securitytracker.com/id?1009403
CVE: CVE-2004-1808
Published: 2004-12-31
Description: Extcompose in metamail does not verify the output file before writing to it, which allows local users to overwrite arbitrary files via a symlink attack.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6062&w=2; http://www.securityfocus.com/bid/9850; https://exchange.xforce.ibmcloud.com/vulnerabilities/15460
CVE: CVE-2004-1809
Published: 2004-12-31
Description: Cross-site scripting (XSS) vulnerability in phpBB 2.0.6d and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) postdays parameter to viewtopic.php or (2) topicdays parameter to viewforum.php.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5324&w=2; http://secunia.com/advisories/11121; http://www.osvdb.org/4257
CVE: CVE-2004-1810
Published: 2004-12-31
Description: The Javascript engine in Opera 7.23 allows remote attackers to cause a denial of service (crash) by creating a new Array object with a large size value, then writing into that array.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9082&w=2; http://www.securityfocus.com/bid/9869; https://exchange.xforce.ibmcloud.com/vulnerabilities/15413
CVE: CVE-2004-1811
Published: 2004-12-31
Description: The SSL HTTP Server in HP Web-enabled Management Software 5.0 through 5.92, with anonymous access enabled, allows remote attackers to compromise the trusted certificates by uploading their own certificates.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0057.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0214&w=2; http://secunia.com/advisories/11126
CVE: CVE-2004-1812
Published: 2004-12-31
Description: Multiple stack-based buffer overflows in Agent Common Services (1) cam.exe and (2) awservices.exe in Unicenter TNG 2.4 allow remote attackers to execute arbitrary code.
CVSS Score: 10.0 (HIGH)
References: ftp://ftp.ca.com/CAproducts/unicenter/CCS31/nt/qi52764/QI52764.DB0; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0214&w=2; http://secunia.com/advisories/11131
CVE: CVE-2004-1813
Published: 2004-12-31
Description: VocalTec VGW4/8 Gateway 8.0 allows remote attackers to bypass authentication via an HTTP request to home.asp with a trailing slash (/).
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1657&w=2; http://www.securityfocus.com/bid/9876; https://exchange.xforce.ibmcloud.com/vulnerabilities/15476
CVE: CVE-2004-1814
Published: 2004-12-31
Description: Directory traversal vulnerability in VocalTec VGW4/8 Gateway 8.0 allows remote attackers to read protected files via .. (dot dot) sequences in an HTTP request, as demonstrated using home.asp.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1657&w=2; http://www.securityfocus.com/bid/9876; https://exchange.xforce.ibmcloud.com/vulnerabilities/15476
CVE: CVE-2004-1823
Published: 2004-12-31
Description: Multiple cross-site scripting (XSS) vulnerabilities in Jelsoft vBulletin 2.0 beta 3 through 3.0 can4 allows remote attackers to inject arbitrary web script or HTML via the (1) page parameter to showthread.php or (2) order parameter to forumdisplay.php.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2453&w=2; http://secunia.com/advisories/11142; http://securitytracker.com/id?1009440
CVE: CVE-2004-1824
Published: 2004-12-31
Description: Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.0 allows remote attackers to inject arbitrary web script or HTML via the what parameter to memberlist.php.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0276.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2453&w=2; http://secunia.com/advisories/11142
CVE: CVE-2004-1828
Published: 2004-12-31
Description: Vcard 2.9 and possibly other versions does not require authorization to run uninstall.php, which could allow remote attackers to uninstall Vcard and delete database tables via a direct request to uninstall.php.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1199&w=2; http://www.securityfocus.com/bid/9910; https://exchange.xforce.ibmcloud.com/vulnerabilities/15522
CVE: CVE-2004-1831
Published: 2004-12-31
Description: Buffer overflow in Chrome 1.2.0.0 and earlier allows remote attackers to cause a denial of service (crash) via a packet with a large length value, which leads to a null dereference or out-of-bounds read.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/chrome-boom-adv.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4657&w=2; http://www.securityfocus.com/bid/9898
CVE: CVE-2004-1832
Published: 2004-12-31
Description: Buffer overflow in the GUI admin service in Mac OS X Server 10.3 allows remote attackers to cause a denial of service (crash and restart) via a large amount of data to TCP port 660.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8575&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7629&w=2; http://www.securityfocus.com/bid/9914
CVE: CVE-2004-1835
Published: 2004-12-31
Description: Multiple SQL injection vulnerabilities in index.php in Invision Gallery 1.0.1 allow remote attackers to execute arbitrary SQL via the (1) img, (2) cat, (3) sort_key, (4) order_key, (5) user, or (6) album parameters.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0032&w=2; http://secunia.com/advisories/11194; http://securitytracker.com/id?1009512
CVE: CVE-2004-1836
Published: 2004-12-31
Description: SQL injection vulnerability in index.php in Invision Power Top Site List 1.1 RC 2 and earlier allows remote attackers to execute arbitrary SQL via the id parameter of the comments action.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7652&w=2; http://secunia.com/advisories/11187; http://securitytracker.com/id?1009511
CVE: CVE-2004-1837
Published: 2004-12-31
Description: Cross-site scripting (XSS) vulnerability in Mod_survey 3.0.x before 3.0.16-pre2 and 3.2.x before 3.2.0-pre4 allows remote attackers to inject arbitrary web script or HTML via the certain survey fields or error messages for malformed query strings.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1972&w=2; http://securitytracker.com/id?1009516; http://www.securityfocus.com/bid/9941
CVE: CVE-2004-1841
Published: 2004-12-31
Description: SQL injection vulnerability in MS Analysis module 2.0 for PHP-Nuke allows remote attackers to execute arbitrary SQL via the referer field in an HTTP request.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0976&w=2; http://www.securityfocus.com/bid/9948; https://exchange.xforce.ibmcloud.com/vulnerabilities/15576
CVE: CVE-2004-1842
Published: 2004-12-31
Description: Cross-site request forgery (CSRF) vulnerability in Php-Nuke 6.x through 7.1.0 allows remote attackers to gain administrative privileges via an img tag with a URL to admin.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2075&w=2; http://secunia.com/advisories/11195; http://www.securityfocus.com/bid/9895
CVE: CVE-2004-1844
Published: 2004-12-31
Description: Cross-site scripting (XSS) vulnerability in Member Management System 2.1 allows remote attackers to inject arbitrary web script or HTML via (1) the err parameter to error.asp or (2) register.asp.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5786&w=2; http://secunia.com/advisories/11179; http://securitytracker.com/id?1009508
CVE: CVE-2004-1845
Published: 2004-12-31
Description: Multiple cross-site scripting (XSS) vulnerabilities in News Manager Lite 2.5 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to comment_add.asp, (2) search parameter to search.asp, or (3) n parameter to category_news_headline.asp.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3496&w=2; http://secunia.com/advisories/11180; http://securitytracker.com/id?1009507
CVE: CVE-2004-1848
Published: 2004-12-31
Description: Ipswitch WS_FTP Server 4.0.2 allows remote attackers to cause a denial of service (disk consumption) and bypass file size restrictions via a REST command with a large size argument, followed by a STOR of a smaller file.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1989&w=2; http://secunia.com/advisories/11206; http://securitytracker.com/id?1009529
CVE: CVE-2004-1858
Published: 2004-12-31
Description: HP Web Jetadmin 7.5.2546 allows remote attackers to cause a denial of service (crash) via a malformed request, possibly due to a stricmp() error from an invalid use of the "$" character.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3003&w=2; http://www.securityfocus.com/advisories/6492; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3003&w=2
CVE: CVE-2004-1860
Published: 2004-12-31
Description: Buffer overflow in Check Point SmartDashboard in Check Point NG AI R54 and R55 allows remote authenticated users to cause a denial of service (server disconnect) and possibly execute arbitrary code via a large filter on a column when using SmartView Tracker.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2510&w=2; http://securitytracker.com/id?1009490; http://www.osvdb.org/4412
CVE: CVE-2004-1863
Published: 2004-12-31
Description: Multiple cross-site scripting (XSS) vulnerabilities in XMB (aka extreme message board) 1.9 beta (aka Nexus beta) allow remote attackers to inject arbitrary web script or HTML via (1) the u2uheader parameter in editprofile.php, the restrict parameter in (2) member.php, (3) misc.php, and (4) today.php, and (5) an arbitrary parameter in phpinfo.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5265&w=2; http://www.osvdb.org/14982; http://www.osvdb.org/14989
CVE: CVE-2004-1867
Published: 2004-12-31
Description: Cross-site scripting (XSS) vulnerability in guest.cgi in Fresh Guest Book allows remote attackers to inject arbitrary web script or HTML via the Name field.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7431&w=2; http://www.securityfocus.com/bid/9995; https://exchange.xforce.ibmcloud.com/vulnerabilities/15649
CVE: CVE-2004-1869
Published: 2004-12-31
Description: Etherlords I 1.07 and earlier and Etherlords II 1.03 and earlier allows remote attackers to cause a denial of service (crash) by sending a packet that specifies the size for the next packet, then sending a larger packet than specified, which causes Etherlords to read unallocated memory.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/ethboom-adv.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4423&w=2; http://www.securityfocus.com/bid/9979
CVE: CVE-2004-1873
Published: 2004-12-31
Description: SQL injection vulnerability in category.asp in A-CART Pro and A-CART 2.0 allows remote attackers to gain privileges via the catcode parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8983&w=2; http://s-a-p.ca/index.php?page=OurAdvisories&id=27; http://secunia.com/advisories/11236
CVE: CVE-2004-1879
Published: 2004-12-31
Description: Cross-site scripting (XSS) vulnerability in PHPKIT 1.6.03 allows allows remote attackers to inject arbitrary web script or HTML via forum messages.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2358&w=2; http://www.securityfocus.com/bid/10013; https://exchange.xforce.ibmcloud.com/vulnerabilities/15681
CVE: CVE-2004-1880
Published: 2004-12-31
Description: Memory leak in the back-bdb backend for OpenLDAP 2.1.12 and earlier allows remote attackers to cause a denial of service (memory consumption).
CVSS Score: 5.0 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000685; http://secunia.com/advisories/9203; http://www.osvdb.org/17000
CVE: CVE-2004-1881
Published: 2004-12-31
Description: SQL injection vulnerability in (1) mailorder.asp or (2) payonline.asp in CactuShop 5.x allows remote attackers to execute arbitrary SQL commands via the strItems parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3762&w=2; http://secunia.com/advisories/11272; http://securitytracker.com/id?1009601
CVE: CVE-2004-1882
Published: 2004-12-31
Description: Cross-site scripting (XSS) vulnerability in popuplargeimage.asp in CactuShop 5.x allows remote attackers to inject arbitrary web script or HTML via the strImageTag parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/019566.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3762&w=2; http://secunia.com/advisories/11272