Archive
20 February 2005
Vulnerabilities first published on this day (UTC), newest first.
64 results · Clear filters · Feed
-
Unscored —CVE-2004-1562 Public exploit
SQL injection vulnerability in redir_url.php in w-Agora 4.1.6a allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2004-1655 Public exploit
Cross-site scripting (XSS) vulnerability in phpWebsite 0.9.3-4 and earlier allows remote attackers to inject arbitrary …
-
Unscored —CVE-2004-1554 Public exploit
PHP remote file inclusion vulnerability in livre_include.php in @lex Guestbook allows remote attackers to execute arbit…
-
Unscored —
ProFTPD 1.2.x, including 1.2.8 and 1.2.10, responds in a different amount of time when a given username exists, which a…
-
Unscored —
CRLF injection vulnerability in wp-login.php in WordPress 1.2 allows remote attackers to perform HTTP Response Splittin…
-
Unscored —CVE-2004-1567 Public exploit
profile.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to gain privileges by setting the mail parameter…
-
Unscored —
Buffer overflow in ShixxNote 6.net build 117 allows remote attackers to execute arbitrary code via a long font field.
-
Unscored —
Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service (application crash) via a STORE UNIQ…
-
Unscored —CVE-2004-1612 Public exploit
Directory traversal vulnerability in SalesLogix 6.1 allows remote attackers to upload arbitrary files via a .. (dot dot…
-
Unscored —
Multiple buffer overflows in MDaemon 6.5.1 allow remote attackers to cause a denial of service (application crash) via …
-
Unscored —CVE-2004-1698 Public exploit
The Base64 function in PopMessenger 1.60 (before 20 Sep 2004) and earlier allows remote attackers to cause a denial of …
-
Unscored —
Microsoft SQL Server 7.0 allows remote attackers to cause a denial of service (mssqlserver service halt) via a long req…
-
Unscored —CVE-2004-1559 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2004-1563 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in w-Agora 4.1.6a allow remote attackers to execute arbitrary web s…
-
Unscored —CVE-2004-1692 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Mambo 4.5 (1.0.9) allows remote attackers to inject arbitrary …
-
Unscored —CVE-2004-1665 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in PsNews 1.1 allows remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2004-1552 Public exploit
SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via (1) the u…
-
Unscored —CVE-2004-1596 Public exploit
The 3COM Wireless router 3CRADSL72 running Boot Code 1.3d allows remote attackers to gain sensitive information such as…
-
Unscored —CVE-2004-1645 Public exploit
Cross-site scripting (XSS) vulnerability in Xedus 1.0 allows remote attackers to execute arbitrary web script or HTML v…
-
Unscored —CVE-2004-1592 Public exploit
PHP remote file inclusion vulnerability in index.php in ocPortal 1.0.3 and earlier allows remote attackers to execute a…
-
Unscored —CVE-2004-1642 Public exploit
WFTPD Pro Server 3.21 allows remote authenticated users to cause a denial of service (crash) via a series of long MLIST…
-
Unscored —CVE-2004-1664 Public exploit
Call of Duty 1.4 and earlier allows remote attackers to cause a denial of service (game end) via a large (1) query or (…
-
Unscored —CVE-2004-1601 Public exploit
Directory traversal vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to access arbitrary files …
-
Unscored —CVE-2004-1681 Public exploit
Multiple buffer overflows in (1) phrelay-cfg, (2) phlocale, (3) pkg-installer, or (4) input-cfg in QNX Photon microGUI …