rainbutterfly/cve_corpus huggingface dataset:
CVE-2004-2708 
Gyach Enhanced (Gyach-E) before 1.0.0 stores passwords in plaintext, which allows attackers to obtain user passwords by reading the configuration file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-06T21:00:00.000Z
CVE-2004-2709 
Buffer overflow in the strip_html_tags method for Gyach Enhanced (Gyach-E) before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via unknown vectors involving HTML tags.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-06T21:00:00.000Z
CVE-2004-2710 
Multiple buffer overflows in Gyach Enhanced (Gyach-E) before 1.0.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to (1) sending certain typing statuses or (2) setting the chat room status bar to the current chat room name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-06T21:00:00.000Z
CVE-2004-2711 
Multiple buffer overflows in Gyach Enhanced (Gyach-E) before 1.0.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to "avatar retrieval."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-06T21:00:00.000Z
CVE-2004-2712 
Buffer overflow in Gyach Enhanced (Gyach-E) before 1.0.0-SneakPeek-3 allows remote attackers to cause a denial of service (crash) via unspecified vectors related to "URL data."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-06T21:00:00.000Z
CVE-2004-2713 
Zone Alarm Pro 1.0 through 5.1 gives full access to %windir%\Internet Logs\* to the EVERYONE group, which allows local users to cause a denial of service by modifying the folder contents or permissions. NOTE: this issue has been disputed by the vendor, who claims that it does not affect product functionality since the same information is also saved in a protected file
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-06T21:00:00.000Z
CVE-2004-2714 
Unspecified vulnerability in Window Maker 0.80.2 and earlier allows attackers to perform unknown actions via format string specifiers in a font specification in WMGLOBAL, probably a format string vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-06T21:00:00.000Z
CVE-2004-2715 
edituser.php3 in PHPMyChat 0.14.5 allow remote attackers to bypass authentication and gain administrative privileges by setting the do_not_login parameter to false.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-06T21:00:00.000Z
CVE-2004-2716 
Multiple SQL injection vulnerabilities in usersL.php3 in PHPMyChat 0.14.5 allow remote attackers to execute arbitrary SQL commands via the (1) sortBy, (2) sortOrder, (3) startReg, (4) U, (5) LastCheck , and (6) R parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-06T21:00:00.000Z
CVE-2004-2717 
Multiple directory traversal vulnerabilities in admin.php3 in PHPMyChat 0.14.5 allow remote attackers with administrative privileges to read arbitrary files via a .. (dot dot) in the (1) sheet and (2) What parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-06T21:00:00.000Z
CVE-2004-2718 
PHPMyChat 0.14.5 does not remove or protect setup.php3 after installation, which allows attackers to obtain sensitive information including database passwords via a direct request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-06T21:00:00.000Z
CVE-2004-2719 
Buffer overflow in the UrlToLocal function in PunyLib.dll of Foxmail 5.0.300 allows remote attackers to execute arbitrary code via a mail message with a long From field, a different issue than CVE-2005-0339.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-06T21:00:00.000Z
CVE-2004-2720 
Cross-site scripting (XSS) vulnerability in register.asp in Snitz Forums 2000 3.4.04 and earlier allows remote attackers to inject arbitrary web script or HTML via javascript events in the Email parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-06T21:00:00.000Z
CVE-2004-2721 
The CheckGroup function in openSkat VTMF before 2.1 generates public key pairs in which the "p" variable might not be prime, which allows remote attackers to determine the private key and decrypt messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-06T21:00:00.000Z
CVE-2004-2722 
Nessus 2.0.10a stores account passwords in plaintext in .nessusrc files, which allows local users to obtain passwords.  NOTE: the original researcher reports that the vendor has disputed this issue
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-06T21:00:00.000Z
CVE-2004-2723 
NessusWX 1.4.4 stores account passwords in plaintext in .session files, which allows local users to obtain passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-06T21:00:00.000Z
CVE-2004-2724 
LionMax Software Chat Anywhere 2.72a allows remote attackers to cause a denial of service (server crash and client CPU consumption) via a username beginning with percent (%) followed by a null character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-06T21:00:00.000Z
CVE-2004-2725 
Multiple cross-site scripting (XSS) vulnerabilities in Aztek Forum 4.0 allow remote attackers to inject arbitrary web script or HTML via (1) the search parameter in (a) search.php, (2) the email parameter in (b) subscribe.php, and (3) the return and (4) title parameters in (c) forum_2.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-06T21:00:00.000Z
CVE-2004-2726 
HTTPMail service in MailEnable Professional 1.18 does not properly handle arguments to the Authorization header, which allows remote attackers to cause a denial of service (null dereference and application crash).  NOTE: This is a different vulnerability than CVE-2005-1348.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-09T10:00:00.000Z
CVE-2004-2727 
Buffer overflow in MEHTTPS (HTTPMail) of MailEnable Professional 1.5 through 1.7 allows remote attackers to cause a denial of service (application crash) via a long HTTP GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-09T10:00:00.000Z
CVE-2004-2728 
Buffer overflow in the FTP server of Hummingbird Connectivity 7.1 and 9.0 allows remote, authenticated users to cause a denial of service (application crash) via a long argument to the XCWD command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-09T10:00:00.000Z
CVE-2004-2729 
Inetd32 Administration Tool of Hummingbird Connectivity 7.1 and 9.0 allows local users to execute arbitrary code by changing the program for handling incoming connections.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-09T10:00:00.000Z
CVE-2004-2730 
Sysinternals PsTools before 2.05, including (1) PsExec before 1.54, (2) PsGetsid before 1.41, (3) PsInfo before 1.61, (4) PsKill before 1.03, (5) PsList before 1.26, (6) PsLoglist before 2.51, (7) PsPasswd before 1.21, (8) PsService before 2.12, (9) PsSuspend before 1.05, and (10) PsShutdown before 2.32, does not properly disconnect from remote IPC$ and ADMIN$ shares, which allows local users to access the shares with elevated privileges by using the existing share mapping.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-09T10:00:00.000Z
CVE-2004-2731 
Multiple integer overflows in Sbus PROM driver (drivers/sbus/char/openprom.c) for the Linux kernel 2.4.x up to 2.4.27, 2.6.x up to 2.6.7, and possibly later versions, allow local users to execute arbitrary code by specifying (1) a small buffer size to the copyin_string function or (2) a negative buffer size to the copyin function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-09T10:00:00.000Z
CVE-2004-2732 
nbmember.cgi in Netbilling 2.0 allows remote attackers to obtain sensitive information via the cmd=test option, which can be leveraged to determine the access key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-09T10:00:00.000Z
CVE-2004-2733 
Web Wiz Forums 7.7a uses invalid logic to determine user privileges, which allows remote attackers to (1) block arbitrary IP addresses via pop_up_ip_blocking.asp or (2) modify topics via pop_up_topic_admin.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-09T10:00:00.000Z
CVE-2004-2734 
webadmin-apache.conf in Novell Web Manager of Novell NetWare 6.5 uses an uppercase Alias tag with an inconsistent lowercase directory tag for a volume, which allows remote attackers to bypass access control to the WEB-INF folder.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-09T10:00:00.000Z
CVE-2004-2735 
Cross-site scripting (XSS) vulnerability in P4DB 2.01 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) SET_PREFERENCES parameter in SetPreferences.cgi; (2) BRANCH parameter in branchView.cgi; (3) FSPC and (4) COMPLETE parameters in changeByUsers.cgi; (5) FSPC, (6) LABEL, (7) EXLABEL, (8) STATUS, (9) MAXCH, (10) FIRSTCH, (11) CHOFFSETDISP, (12) SEARCHDESC, (13) SEARCH_INVERT, (14) USER, (15) GROUP, and (16) CLIENT parameters in changeList.cgi; (17) CH parameter in changeView.cgi; (18) USER parameter in clientList.cgi; (19) CLIENT parameter in clientView.cgi; (20) FSPC parameter in depotTreeBrowser.cgi; (21) FSPC parameter in depotStats.cgi; (22) FSPC, (23) REV, (24) ACT, (25) FSPC2, (26) REV2, (27) CH, and (28) CONTEXT parameters in fileDiffView.cgi; (29) FSPC and (30) REV parameters in fileDownLoad.cgi; (31) FSPC, (32) LISTLAB, and (33) SHOWBRANCH parameters in fileLogView.cgi; (34) FSPC and (35) LABEL parameters in fileSearch.cgi; (36) FSPC, (37) REV, and (38) FORCE parameters in fileViewer.cgi; (39) FSPC parameter in filesChangedSince.cgi; (40) GROUP parameter in groupView.cgi; (41) TYPE, (42) FSPC, and (43) REV parameters in htmlFileView.cgi; (44) CMD parameter in javaDataView.cgi; (45) JOBVIEW and (46) FLD parameters in jobList.cgi; (47) JOB parameter in jobView.cgi; (48) LABEL1 and (49) LABEL2 parameters in labelDiffView.cgi; (50) LABEL parameter in labelView.cgi; (51) FSPC parameter in searchPattern.cgi; (52) TYPE, (53) FSPC, and (54) REV parameters in specialFileView.cgi; (55) GROUPSONLY parameter in userList.cgi; or (56) USER parameter in userView.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-09T10:00:00.000Z
CVE-2004-2736 
Polar HelpDesk 3.0 allows remote attackers to bypass authentication by setting the UserId and UserType values in a cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-09T10:00:00.000Z
CVE-2004-2737 
SQL injection vulnerability in problist.asp in NetSupport DNA HelpDesk 1.01 allows remote attackers to execute arbitrary SQL commands via the where parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-09T10:00:00.000Z
CVE-2004-2738 
Cross-site scripting (XSS) vulnerability in check_user_id.php in ZeroBoard 4.1pl4 and earlier allows remote attackers to inject arbitrary web script or HTML via the user_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-09T10:00:00.000Z
CVE-2004-2739 
The setup routine (setup.php) in PHProjekt 4.2.1 and earlier allows remote attackers to modify system configuration via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-09T10:00:00.000Z
CVE-2004-2740 
PHP remote file inclusion vulnerability in authform.inc.php in PHProjekt 4.2.3 and earlier allows remote attackers to include arbitrary PHP code via a URL in the path_pre parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-09T10:00:00.000Z
CVE-2004-2741 
Cross-site scripting (XSS) vulnerability in the "help window" (help.php) in Horde Application Framework 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the (1) module, (2) topic, or (3) module parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-09T10:00:00.000Z
CVE-2004-2742 
Cross-site scripting (XSS) vulnerability in the report viewer in Crystal Enterprise 8.5, 9, and 10 allows remote attackers to inject arbitrary web script or HTML via script in the URL to a report (RPT) file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-09T10:00:00.000Z
CVE-2004-2743 
upload.cgi in Mega Upload Progress Bar before 1.45 allows remote attackers to copy or overwrite arbitrary files via unspecified parameters related to names of uploaded files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-09T10:00:00.000Z
CVE-2004-2744 
Unspecified vulnerability in Tincan Limited PHPlist before 2.8.12 has unknown impact and attack vectors, related to a "security update release."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-09T10:00:00.000Z
CVE-2004-2745 
Directory traversal vulnerability in Anteco Visual Technologies OwnServer 1.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in a URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T22:00:00.000Z
CVE-2004-2746 
SQL injection vulnerability in adminlogin.asp in XTREME ASP Photo Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-08T20:00:00.000Z
CVE-2004-2747 
Directory traversal vulnerability in Pablo Software Solutions Quick 'n Easy FTP Server 1.77, and possibly earlier versions, allows remote authenticated users to determine the existence of arbitrary files via a .. (dot dot) in the DEL command, which triggers different error messages depending on whether the file exists or not.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-08T20:00:00.000Z
CVE-2004-2748 
viewreport.pl in NetIQ WebTrends Reporting Center Enterprise Edition 6.1a allows remote attackers to determine the installation path via an invalid profileid parameter, which leaks the pathname in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-08T20:00:00.000Z
CVE-2004-2749 
Directory traversal vulnerability in wra/public/wralogin in 2Wire Gateway, possibly as used in HomePortal and other product lines, allows remote attackers to read arbitrary files via a .. (dot dot) in the return parameter.  NOTE: this issue was reported as XSS, but this might be a terminology error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-14T02:00:00.000Z
CVE-2004-2750 
Directory traversal vulnerability in browser.php in JBrowser 1.0 through 2.1 allows remote attackers to read arbitrary files via the directory parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-14T02:00:00.000Z
CVE-2004-2751 
SQL injection vulnerability in the members_list module in PostNuke 0.726, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the sortby parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-14T02:00:00.000Z
CVE-2004-2752 
Cross-site scripting (XSS) vulnerability in the Downloads module in PostNuke up to 0.726, and possibly later versions, allows remote attackers to inject arbitrary HTML and web script via the ttitle parameter in a viewdownloaddetails action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-14T02:00:00.000Z
CVE-2004-2753 
Unspecified vulnerability in SharedX in HP-UX B.11.00, B.11.11, and B.11.22 allows local users to access unspecified files or cause a denial of service via unknown vectors related to handling of "files in a potentially insecure manner."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-14T11:00:00.000Z
CVE-2004-2754 
SQL injection vulnerability in SSI.php in YaBB SE 1.5.4, 1.5.3, and possibly other versions before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the ID_MEMBER parameter to the (1) recentTopics and (2) welcome functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-15T23:00:00.000Z
CVE-2004-2755 
Cross-site scripting (XSS) vulnerability in Symantec Web Security 2.5, 3.0.0, and 3.0.1 before build 62 allows remote attackers to inject arbitrary web script or HTML via the query string in blocked URLs that are listed in (1) error or (2) block page messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-15T23:00:00.000Z
CVE-2004-2756 
Cross-site scripting (XSS) vulnerability in viewtopic.php in Xoops 2.x, possibly 2 through 2.0.5, allows remote attackers to inject arbitrary web script or HTML via the (1) forum and (2) topic_id parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T01:00:00.000Z
CVE-2004-2757 
Cross-site scripting (XSS) vulnerability in the failed login page in Novell iChain before 2.2 build 2.2.113 and 2.3 First Customer Ship (FCS) allows remote attackers to inject arbitrary web script or HTML via url parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T02:00:00.000Z
CVE-2004-2758 
Multiple unspecified vulnerabilities in the H.323 protocol implementation for Sun SunForum 3.2 and 3D 1.0 allow remote attackers to cause a denial of service (segmentation fault and process crash), as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-06T02:00:00.000Z
CVE-2004-2759 
Shared Sun StorEdge QFS and SAM-QFS file systems, as used in Utilization Suite 4.0 through 4.1 and Performance Suite 4.0 through 4.1, might allow local users to read portions of deleted files by accessing data within sparse files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-11T00:00:00.000Z
CVE-2004-2760 
sshd in OpenSSH 3.5p1, when PermitRootLogin is disabled, immediately closes the TCP connection after a root login attempt with the correct password, but leaves the connection open after an attempt with an incorrect password, which makes it easier for remote attackers to guess the password by observing the connection state, a different vulnerability than CVE-2003-0190.  NOTE: it could be argued that in most environments, this does not cross privilege boundaries without requiring leverage of a separate vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-08-04T10:00:00.000Z
CVE-2004-2761 
The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of MD5 in the signature algorithm of an X.509 certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-05T20:00:00.000Z
CVE-2004-2762 
The server in IBM Tivoli Storage Manager (TSM) 4.2.x on MVS, 5.1.9.x before 5.1.9.1, 5.1.x before 5.1.10, 5.2.2.x before 5.2.2.3, 5.2.x before 5.2.3, 5.3.x before 5.3.0, and 6.x before 6.1, when the HTTP communication method is enabled, allows remote attackers to cause a denial of service (daemon crash or hang) via unspecified HTTP traffic, as demonstrated by the IBM port scanner 1.3.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-31T18:00:00.000Z
CVE-2004-2763 
The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing (XST) attacks in applications that are vulnerable to cross-site scripting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-01T22:00:00.000Z
CVE-2004-2764 
Sun SDK and Java Runtime Environment (JRE) 1.4.2 through 1.4.2_04, 1.4.1 through 1.4.1_07, and 1.4.0 through 1.4.0_04 allows untrusted applets and unprivileged servlets to gain privileges and read data from other applets via unspecified vectors related to classes in the XSLT processor, aka "XML sniffing."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-02T10:00:00.000Z
CVE-2004-2765 
Cross-site scripting (XSS) vulnerability in Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, a different vulnerability than CVE-2005-2022 and CVE-2006-5486.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-01-28T20:00:00.000Z
CVE-2004-2766 
Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02 allows remote attackers to obtain unspecified "access" to e-mail via a crafted e-mail message, related to a "session hijacking" issue, a different vulnerability than CVE-2005-2022 and CVE-2006-5486.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-01-28T20:00:00.000Z
CVE-2004-2767 
NWFTPD.nlm before 5.04.25 in the FTP server in Novell NetWare does not promptly close DS sessions, which allows remote attackers to cause a denial of service (connection slot exhaustion) by establishing many FTP sessions that persist for the lifetime of a DS session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-05T15:15:00.000Z
CVE-2004-2768 
dpkg 1.9.21 does not properly reset the metadata of a file during replacement of the file in a package upgrade, which might allow local users to gain privileges by creating a hard link to a vulnerable (1) setuid file, (2) setgid file, or (3) device, a related issue to CVE-2010-2059.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-08T18:00:00.000Z
CVE-2004-2769 
Cerberus FTP Server before 4.0.3.0 allows remote authenticated users to list hidden files, even when the "Display hidden files" option is enabled, via the (1) MLSD or (2) MLST commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-02T20:00:00.000Z
CVE-2004-2771 
The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-12-24T18:00:00.000Z
CVE-2004-2776 
go.cgi in GoScript 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) query string or (2) artarchive parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-31T19:52:44.000Z