CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In April 2004 (CVSS score >= 6)

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2004-1989 Exec Code File Inclusion 2004-04-30 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to execute arbitrary PHP code by modifying the THEME_DIR parameter to reference a URL on a remote web server that contains user_list_info_box.inc.
2 CVE-2004-1988 Exec Code File Inclusion 2004-04-30 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4 allows remote attackers to execute arbitrary PHP code by modifying the CPG_M_DIR to reference a URL on a remote web server that contains functions.inc.php.
3 CVE-2004-1987 Exec Code 2004-04-30 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to execute arbitrary commands via shell metacharacters in the (1) $CONFIG['impath'] or (2) $CONFIG['jpeg_qual'] parameters.
4 CVE-2004-1976 2004-04-28 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
SMC Barricade broadband router 7008ABR and 7004VBR enable remote administration by default, which allows remote attackers to gain access by connecting to port 1900.
5 CVE-2004-1972 Exec Code Sql 2004-04-26 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to execute arbitrary SQL code via the (1) clipid or (2) catid parameters in a viewclip, viewcat, or voteclip action.
6 CVE-2004-1970 2004-04-26 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Samsung SmartEther SS6215S switch, and possibly other Samsung switches, allows remote attackers and local users to gain administrative access by providing the admin username followed by a password that is the maximum allowed length, then pressing the enter key after the resulting error message.
7 CVE-2004-1969 Exec Code 2004-04-25 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
The avatar upload capability in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to execute arbitrary script by uploading files that include scripting code such as Javascript.
8 CVE-2004-1967 Exec Code CSRF 2004-04-25 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Cross-site request forgery (CSRF) vulnerabilities in (1) cp_forums.php, (2) cp_usergroup.php, (3) cp_ipbans.php, (4) myhome.php, (5) post.php, or (6) moderator.php in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execute arbitrary code by including the code in an image tag or a link.
9 CVE-2004-1961 Exec Code Sql Bypass 2004-04-23 2016-12-20
7.5
 None Remote Low Not required Partial Partial Partial
blocker.php in Protector System 1.15b1 allows remote attackers to bypass SQL injection protection and execute limited SQL commands via URL-encoded "'" characters ("%27").
10 CVE-2004-1952 Exec Code +Priv Sql 2004-04-23 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL commands and gain privileges via the password.
11 CVE-2004-1945 Exec Code Overflow 2004-04-20 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in Kinesphere eXchange POP3 allows remote attackers to execute arbitrary code via a long MAIL FROM field.
12 CVE-2004-1943 Exec Code File Inclusion 2004-04-19 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
PHP remote file inclusion vulnerability in album_portal.php in phpBB modified by Przemo 1.8 allows remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter.
13 CVE-2004-1942 2004-04-19 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
The Solaris 9 patches 113579-02 through 113579-05, and 114342-02 through 114342-05, prevent ypserv and ypxfrd from properly restricting access to secure NIS maps, which allows local users to use ypcat or ypmatch to extract the contents of a secure map such as passwd.adjunct.byname.
14 CVE-2004-1938 Exec Code Sql 2004-04-19 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in userlogin.php in Phorum 3.4.7 allows remote attackers to execute arbitrary SQL commands via doubly hex-encoded characters such as "%2527", which is translated to "'", as demonstrated using the phorum_uriauth parameter to list.php.
15 CVE-2004-1936 Bypass 2004-04-14 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
ZoneAlarm Pro 4.5.538.001 and possibly other versions allows remote attackers to bypass e-mail protection via attachments whose names contain certain non-English characters.
16 CVE-2004-1934 Exec Code File Inclusion 2004-04-15 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
PHP remote file inclusion vulnerability in affich.php in Gemitel 3.50 allows remote attackers to execute arbitrary PHP code via the base parameter.
17 CVE-2004-1932 Exec Code Sql 2004-04-12 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in (1) auth.php and (2) admin.php in PHP-Nuke 6.x through 7.2 allows remote attackers to execute arbitrary SQL code and create an administrator account via base64-encoded SQL in the admin parameter.
18 CVE-2004-1929 Sql Bypass 2004-04-13 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in the bblogin function in functions.php in PHP-Nuke 6.x through 7.2 allows remote attackers to bypass authentication and gain access by injecting base64-encoded SQL code into the user parameter.
19 CVE-2004-1928 20 2004-04-12 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
The image upload feature in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to upload and possibly execute arbitrary files via the img/wiki_up URL.
20 CVE-2004-1926 94 2004-04-11 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to inject arbitrary code via the (1) Theme, (2) Country, (3) Real Name, or (4) Displayed time zone fields in a User Profile, or the (5) Name, (6) Description, (7) URL, or (8) Country fields in a Directory/Add Site operation.
21 CVE-2004-1925 89 Exec Code Sql 2004-04-12 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Multiple SQL injection vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sort_mode parameter in (1) tiki-usermenu.php, (2) tiki-list_file_gallery.php, (3) tiki-directory_ranking.php, (4) tiki-browse_categories.php, (5) tiki-index.php, (6) tiki-user_tasks.php, (7) tiki-directory_ranking.php, (8) tiki-directory_search.php, (9) tiki-file_galleries.php, (10) tiki-list_faqs.php, (11) tiki-list_trackers.php, (12) tiki-list_blogs.php, or via the offset parameter in (13) tiki-usermenu.php, (14) tiki-browse_categories.php, (15) tiki-index.php, (16) tiki-user_tasks.php, (17) tiki-list_faqs.php, (18) tiki-list_trackers.php, or (19) tiki-list_blogs.php.
22 CVE-2004-1921 2004-04-10 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
X-Micro WLAN 11b Broadband Router 1.6.0.1 has a hardcoded "1502" username and password, which could allow remote attackers to gain access.
23 CVE-2004-1920 2004-04-10 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
X-Micro WLAN 11b Broadband Router 1.2.2, 1.2.2.3, 1.2.2.4, and 1.6.0.0 has a hardcoded "super" username and password, which could allow remote attackers to gain access.
24 CVE-2004-1917 Exec Code 2004-04-08 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Format string vulnerability in test_func_func in LCDProc 0.4.1 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the str variable.
25 CVE-2004-1916 Exec Code Overflow 2004-04-08 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows remote attackers to execute arbitrary code via (1) a long invalid command to parse_all_client_messages function, or (2) long argv command to test_func_func function.
26 CVE-2004-1915 Exec Code Overflow 2004-04-08 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in the parse_all_client_messages function in LCDproc 0.4.x up to 0.4.4 allows remote attackers to execute arbitrary code via a large number of arguments.
27 CVE-2004-1078 Exec Code Overflow 2004-04-26 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Stack-based buffer overflow in the client for Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and Citrix MetaFrame Presentation Server client for WinCE before 8.33 allows remote attackers to execute arbitrary code via a long cached icon filename in the InName XML element.
28 CVE-2004-0364 2004-04-15 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
The WrapNISUM ActiveX component (WrapUM.dll) in Norton Internet Security 2004 is marked safe for scripting, which allows remote attackers to execute arbitrary programs via the LaunchURL method.
29 CVE-2004-0363 Exec Code Overflow 2004-04-15 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Stack-based buffer overflow in the SymSpamHelper ActiveX component (symspam.dll) in Norton AntiSpam 2004, as used in Norton Internet Security 2004, allows remote attackers to execute arbitrary code via a long parameter to the LaunchCustomRuleWizard method.
30 CVE-2004-0362 Exec Code Overflow 2004-04-15 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various RealSecure, Proventia, and BlackICE products, allow remote attackers to execute arbitrary code via a SRV_MULTI response containing a SRV_USER_ONLINE response packet and a SRV_META_USER response packet with long (1) nickname, (2) firstname, (3) lastname, or (4) email address fields, as exploited by the Witty worm.
31 CVE-2004-0224 Exec Code Overflow 2004-04-15 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Multiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0.45, and SqWebMail before 4.0.0 may allow remote attackers to execute arbitrary code "when Unicode character is out of BMP range."
32 CVE-2004-0153 Exec Code 2004-04-15 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Multiple format string vulnerabilities in emil 2.1.0 and earlier may allow remote attackers to execute arbitrary code by triggering certain error messages.
33 CVE-2004-0152 Exec Code Overflow 2004-04-15 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Multiple stack-based buffer overflows in (1) the encode_mime function, (2) the encode_uuencode function, (3) or the decode_uuencode function for emil 2.1.0 and earlier allow remote attackers to execute arbitrary code via e-mail messages containing attachments with filenames.
34 CVE-2004-0151 Exec Code 2004-04-15 2017-07-11
7.2
 None Local Low Not required Complete Complete Complete
Unknown vulnerability in xitalk 1.1.11 and earlier allows local users to execute arbitrary commands.
35 CVE-2004-0150 Exec Code Overflow 2004-04-15 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in the getaddrinfo function in Python 2.2 before 2.2.2, when IPv6 support is disabled, allows remote attackers to execute arbitrary code via an IPv6 address that is obtained using DNS.
36 CVE-2004-0148 Bypass 2004-04-15 2018-05-03
7.2
 None Local Low Not required Complete Complete Complete
wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead.
37 CVE-2004-0121 Exec Code 2004-04-15 2018-10-12
7.5
 None Remote Low Not required Partial Partial Partial
Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling OUTLOOK.EXE, which allows remote attackers to use script code in the Local Machine zone and execute arbitrary programs.
38 CVE-2003-1039 Exec Code Overflow 2004-04-15 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Multiple buffer overflows in the mySAP.com architecture for SAP allow remote attackers to execute arbitrary code via a long HTTP Host header to (1) Message Server, (2) Web Dispatcher, or (3) Application Server.
39 CVE-2003-1037 Exec Code 2004-04-15 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Format string vulnerability in the WGate component for SAP Internet Transaction Server (ITS) allows remote attackers to execute arbitrary code via a high "trace level."
40 CVE-2003-1036 Exec Code Overflow 2004-04-15 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Multiple buffer overflows in the AGate component for SAP Internet Transaction Server (ITS) allow remote attackers to execute arbitrary code via long (1) ~command, (2) ~runtimemode, or (3) ~session parameters, or (4) a long HTTP Content-Type header.
41 CVE-2003-1035 Bypass 2004-04-15 2018-10-19
7.5
 None Remote Low Not required Partial Partial Partial
The default installation of SAP R/3 46C/D allows remote attackers to bypass account locking by using the RFC API instead of the SAPGUI to conduct a brute force password guessing attack, which does not lock out the account like the SAPGUI does.
42 CVE-2003-1033 +Priv 2004-04-15 2017-07-11
7.2
 None Local Low Not required Complete Complete Complete
The (1) instdbmsrv and (2) instlserver programs in SAP DB Development Tools 7.x trust the user-provided INSTROOT environment variable as a path when assigning setuid permissions to the lserver program, which allows local users to gain root privileges via a modified INSTROOT that points to a malicious dbmsrv or lserver program.
43 CVE-2003-0594 Dir. Trav. Bypass 2004-04-15 2017-10-11
7.5
 None Remote Low Not required Partial Partial Partial
Mozilla allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Mozilla to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.
44 CVE-2003-0593 22 Dir. Trav. Bypass 2004-04-15 2022-03-01
7.5
 None Remote Low Not required Partial Partial Partial
Opera allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Opera to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.
45 CVE-2003-0592 Dir. Trav. Bypass 2004-04-15 2017-10-11
7.5
 None Remote Low Not required Partial Partial Partial
Konqueror in KDE 3.1.3 and earlier (kdelibs) allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Konqueror to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.
46 CVE-2003-0514 Dir. Trav. Bypass 2004-04-15 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Apple Safari allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Safari to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.
47 CVE-2003-0513 Dir. Trav. Bypass 2004-04-15 2021-07-23
7.5
 None Remote Low Not required Partial Partial Partial
Microsoft Internet Explorer allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Internet Explorer to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.
48 CVE-2003-0257 +Priv 2004-04-15 2017-07-11
7.2
 None Local Low Not required Complete Complete Complete
Format string vulnerability in the printer capability for IBM AIX .3, 5.1, and 5.2 allows local users to gain printq or root privileges.
49 CVE-2002-1578 2004-04-15 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
The default installation of SAP R/3, when using Oracle and SQL*net V2 3.x, 4.x, and 6.10, allows remote attackers to obtain arbitrary, sensitive SAP data by directly connecting to the Oracle database and executing queries against the database, which is not password-protected.
50 CVE-2002-1577 +Priv 2004-04-15 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
SAP R/3 2.0B to 4.6D installs several clients with default users and passwords, which allows remote attackers to gain privileges via the (1) SAP*, (2) SAPCPIC, (3) DDIC, (4) EARLYWATCH, or (5) TMSADM accounts.
Total number of vulnerabilities : 51   Page : 1 (This Page)2
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.