rainbutterfly/cve_corpus huggingface dataset:
CVE-2004-2137 
Outlook Express 6.0, when sending multipart e-mail messages using the "Break apart messages larger than" setting, leaks the BCC recipients of the message to the addresses listed in the To and CC fields, which may allow remote attackers to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-14T04:00:00.000Z
CVE-2004-2138 
Cross-site scripting (XSS) vulnerability in AWSguest.php in AllWebScripts MySQLGuest allows remote attackers to inject arbitrary HTML and PHP code via the (1) Name, (2) Email, (3) Homepage or (4) Comments field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-30T04:00:00.000Z
CVE-2004-2139 
Unknown vulnerability in Adminedit.pl YaBB 1 Gold before 1.3.2 allows attackers to execute arbitrary code via settings.pl.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-30T04:00:00.000Z
CVE-2004-2140 
CRLF injection vulnerability in YaBB 1 Gold before 1.3.2 allows remote attackers to modify text file contents via the subject variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-30T04:00:00.000Z
CVE-2004-2142 
Unknown vulnerability in the remote tape support (remote.c) in the RMT client for Jorg Schilling sdd 1.28 and 1.31 has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-30T04:00:00.000Z
CVE-2004-2143 
SQL injection vulnerability in the ReMOSitory Server add-on module to Mambo Portal 4.5.1 (1.09) and earlier allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in the com_remository option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-30T04:00:00.000Z
CVE-2004-2144 
Baal Smart Forms before 3.2 allows remote attackers to bypass authentication and obtain system access via a direct request to regadmin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-01T04:00:00.000Z
CVE-2004-2145 
SQL injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows remote attackers to execute arbitrary SQL commands via the (1) sortdir or (2) criteria parameter to ladder-log.asp or the (3) memberid or (4) teamid parameter to view-profile.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-01T04:00:00.000Z
CVE-2004-2146 
CRLF injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows attackers to conduct HTTP response splitting attacks via the fid parameter in a writenew action to thread-post.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-01T04:00:00.000Z
CVE-2004-2147 
Unknown versions of Symantec Norton AntiVirus and Microsoft Outlook allow attackers to cause a denial of service (crash) via malformed e-mail messages (1) without a body or (2) without a carriage return ("\n") separating the headers from the body.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-01T04:00:00.000Z
CVE-2004-2148 
Unknown local vulnerability in the "change user" feature of Slava Astashonok Fprobe 1.0.5 and earlier has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-01T04:00:00.000Z
CVE-2004-2149 
Buffer overflow in the prepared statements API in libmysqlclient for MySQL 4.1.3 beta and 4.1.4 allows remote attackers to cause a denial of service via a large number of placeholders.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-01T04:00:00.000Z
CVE-2004-2150 
Nettica Corporation INTELLIPEER Email Server 1.01 displays different error messages for valid and invalid account names, which allows remote attackers to determine valid account names.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-01T04:00:00.000Z
CVE-2004-2151 
Chatman 1.1.1 RC1 and earlier allows remote attackers to cause a denial of service (memory consumption or application crash) via a very large data size.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-01T04:00:00.000Z
CVE-2004-2152 
Cross-site scripting (XSS) vulnerability in 'raw' page output mode for MediaWiki 1.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-01T04:00:00.000Z
CVE-2004-2153 
Multiple unknown vulnerabilities in Real Estate Management Software 1.0 have unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-01T04:00:00.000Z
CVE-2004-2154 
CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-05T04:00:00.000Z
CVE-2004-2155 
Online-bookmarks before 0.4.6 allows remote attackers to bypass its authentication mechanism via a direct request to (1) config/*, (2) bookmarks.php, (3) footer.php, (4) main.php, (5) tree.php, or (6) functions.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2156 
Multiple unknown vulnerabilities in Online Recruitment Agency 1.0 have unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2157 
Cross-site scripting (XSS) vulnerability in Comment.php in Serendipity 0.7 beta1, and possibly other versions before 0.7-beta3, allows remote attackers to inject arbitrary HTML and PHP code via the (1) email or (2) username field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2158 
SQL injection vulnerability in Serendipity 0.7-beta1 allows remote attackers to execute arbitrary SQL commands via the entry_id parameter to (1) exit.php or (2) comment.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2159 
Multiple buffer overflows in XMLStarlet Command Line XML Toolkit 0.9.3 have unknown impact and attack vectors via (1) xml_elem.c and (2) xml_select.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2160 
Format string vulnerability in xml_elem.c for XMLStarlet Command Line XML Toolkit 0.9.3 may allow attackers to cause a denial of service or execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2161 
SQL injection vulnerability in file_overview.php in TUTOS 1.1 allows remote attackers to execute arbitrary SQL commands via the link_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2162 
Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to inject arbitrary web script or HTML via (1) the search field of the Address Module or (2) the t parameter to app_new.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2163 
login_radius on OpenBSD 3.2, 3.5, and possibly other versions does not verify the shared secret in a response packet from a RADIUS server, which allows remote attackers to bypass authentication by spoofing server replies.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2164 
shoprestoreorder.asp in VP-ASP 5.0 does not close the database connection when a user restores a previous order, which allows remote attackers to cause a denial of service (connection consumption).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2165 
Lords of the Realm III 1.01 and earlier, when in the lobby stage, allows remote attackers to cause a denial of service (crash from unallocated memory write) via a long user nickname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2166 
The print-from-email feature in the Canon ImageRUNNER (iR) 5000i and C3200 digital printer, when not using IP address range filtering, allows remote attackers to print arbitrary text without authentication via a text/plain email to TCP port 25.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2167 
Multiple buffer overflows in LaTeX2rtf 1.9.15, and possibly other versions, allow remote attackers to execute arbitrary code via (1) the expandmacro function, and possibly (2) Environments and (3) TranslateCommand.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2168 
BaSoMail 1.24 allows remote attackers to cause a denial of service (CPU consumption) via multiple connections to TCP port (1) 25 (SMTP) or (2) 110 (POP3).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2169 
Application Access Server (A-A-S) 1.0.37 and earlier allows remote authenticated users to cause a denial of service (application crash) via a long file request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2170 
Directory traversal vulnerability in sample_showcode.html in Caravan 2.00/03d and earlier allows remote attackers to read arbitrary files via the fname parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2171 
Cross-site scripting (XSS) vulnerability in Cherokee before 0.4.8 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly quoted in the resulting error page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2172 
EarlyImpact ProductCart uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the password via a chosen plaintext attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2173 
SQL injection vulnerability in advSearch_h.asp in EarlyImpact ProductCart allows remote attackers to execute arbitrary SQL commands via the priceUntil parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2174 
Cross-site scripting (XSS) vulnerability in Custva.asp in EarlyImpact ProductCart allows remote attackers to inject arbitrary Javascript via the redirectUrl parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2175 
Multiple SQL injection vulnerabilities in ReviewPost PHP Pro allow remote attackers to execute arbitrary SQL commands via the (1) product parameter to showproduct.php or (2) cat parameter to showcat.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2176 
The Internet Connection Firewall (ICF) in Microsoft Windows XP SP2 is configured by default to trust sessmgr.exe, which allows local users to use sessmgr.exe to create a local listening port that bypasses the ICF access controls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2177 
Cross-site scripting (XSS) vulnerability in DevoyBB Web Forum 1.0.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2178 
SQL injection vulnerability in DevoyBB Web Forum 1.0.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2179 
asycpict.dll, as used in Microsoft products such as Front Page 97 and 98, allows remote attackers to cause a denial of service (hang) via a JPEG image with maximum height and width values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2180 
Multiple cross-site scripting (XSS) vulnerabilities in WowBB Forum 1.61 allow remote attackers to inject arbitrary web script or HTML via the (1) country parameter to view_user.php, (2) show parameter to view_forum.php, (3) letter parameter to view_user.php, (4) highlight parameter to view_topic.php, (5) show parameter to index.php, (6) q parameter to search.php, (7) Referer header to admin.php, or the (8) user_email parameter to login.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2181 
Multiple SQL injection vulnerabilities in WowBB Forum 1.61 allow remote attackers to execute arbitrary SQL commands via the (1) sort_by or (2) page parameters to view_user.php, or the (3) forum_id parameter to view_topic.php.  NOTE: the sort_by vector was later reported to be present in WowBB 1.65.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2182 
Session fixation vulnerability in Macromedia JRun 4.0 allows remote attackers to hijack user sessions by pre-setting the user session ID information used by the session server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2183 
Unknown vulnerability in WeHelpBUS 0.1 allows remote attackers to execute arbitrary shell commands via the query string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2184 
Directory traversal vulnerability in Digicraft Yak! server 2.0 through 2.1.2 allows remote attackers to read or write arbitrary files via "../" or "..\" sequences in commands such as (1) dir or (2) put.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2185 
Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki 1.3.5 allow remote attackers to execute arbitrary scripts and/or SQL queries via (1) the UnicodeConverter extension, (2) raw page views, (3) SpecialIpblocklist, (4) SpecialEmailuser, (5) SpecialMaintenance, and (6) ImagePage.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2186 
SQL injection vulnerability in MediaWiki 1.3.5 allows remote attackers to execute arbitrary SQL commands via SpecialMaintenance.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2187 
Unknown vulnerability in ImagePage for MediaWiki 1.3.5, related to "filename validation," has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2188 
Cross-site scripting (XSS) vulnerability in DMXReady Site Chassis Manager allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2189 
SQL injection vulnerability in DMXReady Site Chassis Manager allows remote attackers to execute arbitrary SQL commands via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2190 
Directory traversal vulnerability in Unzoo 4.4-2 has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2191 
Cross-site scripting (XSS) vulnerability in ttt-webmaster.php in Turbo Traffic Trader PHP 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) msg[0] or (2) siteurl parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2192 
SQL injection vulnerability in tttadmin/settings.php in Turbo Traffic Trader PHP 1.0 allows remote attackers to execute arbitrary SQL commands via the ttt_admin parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2193 
Cross-site scripting (XSS) vulnerability in trade.php for CJOverkill 4.0.3 allows remote attackers to inject arbitrary web script or HTML via the (1) tms[0] or (2) url parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2194 
MailEnable Professional Edition before 1.53 and Enterprise Edition before 1.02 allows remote attackers to cause a denial of service (crash) via malformed (1) SMTP or (2) IMAP commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2195 
PHP remote file inclusion vulnerability in index.php in Zanfi CMS lite 1.1 allows remote attackers to execute arbitrary PHP code via the inc parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2196 
Zanfi CMS lite 1.1 allows remote attackers to obtain the full path of the web server via direct requests without required arguments to (1) adm_pages.php, (2) corr_pages.php, (3) del_block.php, (4) del_page.php, (5) footer.php, (6) home.php, and others.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2197 
kdocker.cpp in kdocker 0.1 through 0.8 does not properly check the ownership of files, which could allow local users to execute arbitrary programs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2198 
account.asp in DUware DUclassmate 1.0 through 1.1 allows remote attackers to change the passwords for arbitrary users by modifying the MM_recordId parameter on the "My Account" page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2199 
Cross-site scripting (XSS) vulnerability in DUware DUclassified 4.0 allows remote attackers to inject arbitrary web script or HTML via the message text.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2200 
Cross-site scripting (XSS) vulnerability in DUware DUforum 3.0 through 3.1 allows remote attackers to inject arbitrary web script or HTML via via the message text.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2201 
SQL injection vulnerability in DUware DUforum 3.0 through 3.1 allows remote attackers to execute arbitrary SQL commands via the FOR_ID parameter in messages.asp, (2) MSG_ID parameter in messageDetail.asp, or (3) password parameter in the login form.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2202 
Multiple SQL injection vulnerabilities in DUware DUclassified 4.0 through 4.2 allows remote attackers to bypass authentication and execute other commands on the server's underlying database via the (1) cat_id or (2) sub_id parameters in adDetail.asp, or (2) the password parameter in the login form.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2203 
Ansel 1.2 through 2.0 uses insecure default permissions, which allows remote attackers to gain access to web readable directories.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2204 
Macromedia ColdFusion MX 6.0 and 6.1 application server, when running with the CreateObject function or CFOBJECT tag enabled, allows local users to conduct unauthorized activities and obtain administrative passwords by creating CFML scripts that use CreateObject or CFOBJECT.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2205 
Unknown vulnerability in Veritas Cluster Server 1.0.1 through 4.0 allows local users to gain root access via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2206 
SQL injection vulnerability in NatterChat 1.12 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2207 
Cross-site scripting (XSS) vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2208 
CRLF injection vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to conduct HTTP response splitting attacks via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2209 
SQL injection vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2210 
Multiple cross-site scripting (XSS) vulnerabilities in Express-Web Content Management System (CMS) allow remote attackers to steal cookie-based authentication information and possibly perform other exploits via the (1) n, (2) b, (3) e, or (4) a parameters to default.asp, (5) the Referer header in an HTTP request to login.asp, or (6) the email parameter to subscribe/default.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2211 
Cross-site scripting (XSS) vulnerability in AliveSites Forums 2.0 allows remote attackers to inject arbitrary web script or HTML via the (1) forum_id, (2) method, or (3) forum_title parameters to post.asp, (4) the forum_title parameter to forum.asp, or (5) the id parameter to post.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2212 
SQL injection vulnerability in forum.asp in AliveSites Forums 2.0 allows remote attackers to execute arbitrary SQL commands via the forum_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-10T04:00:00.000Z
CVE-2004-2213 
Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to obtain the source code for scripts via a (1) trailing dot (".") or (2) trailing space in an HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-17T04:00:00.000Z
CVE-2004-2214 
Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to bypass access restrictions via a URI with mixed case characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-17T04:00:00.000Z