268011
|
- |
|
php_fusion
|
php_fusion
|
SQL injection vulnerability in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the rowstart parameter to (1) index.php or (2) members.php, or (3) the comment_id paramete…
|
NVD-CWE-Other
|
CVE-2004-2437
|
2017-07-11 10:31 |
2004-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268012
|
- |
|
php_fusion
|
php_fusion
|
Cross-site scripting (XSS) vulnerability in PHP-Fusion 4.01 allows remote attackers to inject arbitrary web script or HTML via the (1) Submit News, (2) Submit Link or (3) Submit Article field.
|
NVD-CWE-Other
|
CVE-2004-2438
|
2017-07-11 10:31 |
2004-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268013
|
- |
|
hp
|
color_laserjet color_laserjet_4600 laserjet_2500 laserjet_3000 laserjet_3700 laserjet_4100_mfp laserjet_4200 laserjet_4300 laserjet_9000 laserjet_9000_mfp laserjet_9040_…
|
The remote upgrade capability in HP LaserJet 4200 and 4300 printers does not require a password, which allows remote attackers to upgrade firmware.
|
NVD-CWE-Other
|
CVE-2004-2439
|
2017-07-11 10:31 |
2004-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268014
|
- |
|
proxytunnel
|
proxytunnel
|
Unspecified vulnerability in cmdline.c in proxytunnel 1.1.3 and earlier allows local users to obtain proxy credentials (username or password) of other users.
|
NVD-CWE-Other
|
CVE-2004-2440
|
2017-07-11 10:31 |
2004-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268015
|
- |
|
kerio
|
kerio_mailserver
|
Unspecified vulnerability in Kerio MailServer before 6.0.3 has unknown impact and unknown remote attack vectors, related to a "potential security issue."
|
NVD-CWE-Other
|
CVE-2004-2441
|
2017-07-11 10:31 |
2004-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268016
|
- |
|
f-secure
|
f-secure_anti-virus f-secure_for_firewalls f-secure_internet_security f-secure_personal_express internet_gatekeeper
|
Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows Servers 5.50 and earlier, MIMEsweeper 5.50 and earlier, Anti-Virus for Linux Ser…
|
NVD-CWE-Other
|
CVE-2004-2442
|
2017-07-11 10:31 |
2004-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268017
|
- |
|
jaws
|
jaws
|
Jaws 0.3 allows remote attackers to bypass authentication and via an HTTP request to admin.php with the logged cookie set to the MD5 hash of a null password, which is compared against the logged sess…
|
NVD-CWE-Other
|
CVE-2004-2443
|
2017-07-11 10:31 |
2004-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268018
|
- |
|
jaws
|
jaws
|
Cross-site scripting (XSS) vulnerability in index.php in Jaws 0.3 allows remote attackers to inject arbitrary web script or HTML via the action parameter.
|
NVD-CWE-Other
|
CVE-2004-2444
|
2017-07-11 10:31 |
2004-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268019
|
- |
|
jaws
|
jaws
|
Directory traversal vulnerability in index.php in Jaws 0.3 BETA allows remote attackers to view arbitrary files via a .. (dot dot) in the gadget parameter.
|
NVD-CWE-Other
|
CVE-2004-2445
|
2017-07-11 10:31 |
2004-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268020
|
- |
|
1st_class_internet_solutions
|
1st_class_mail_server
|
Directory traversal vulnerability in 1st Class Mail Server 4.01 allows remote attackers to read arbitrary files via a ".." (dot dot) sequences in unknown vectors.
|
NVD-CWE-Other
|
CVE-2004-2446
|
2017-07-11 10:31 |
2004-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|