CVE List

Id CVE No. Status Description Phase Votes Comments Actions
9965  CVE-2004-1537  Candidate  Cross-site scripting (XSS) vulnerability in popup.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers to execute arbitrary web script via the img parameter.  Assigned (20050218)  None (candidate not yet proposed)    View
9964  CVE-2004-1536  Candidate  SQL injection vulnerability in index.php in the ibProArcade module for Invision Power Board (IPB) 1.x and 2.x allows remote attackers to execute arbitrary SQL commands via the cat parameter.  Assigned (20050218)  None (candidate not yet proposed)    View
9963  CVE-2004-1535  Candidate  PHP remote file inclusion vulnerability in admin_cash.php for the Cash Mod module for phpBB allows remote attackers to execute arbitrary PHP code by modifying the phpbb_root_path parameter to reference a URL on a remote web server that contains the code.  Assigned (20050218)  None (candidate not yet proposed)    View
9962  CVE-2004-1534  Candidate  ZoneAlarm and ZoneAlarm Pro before 5.5.062, with ad-blocking enabled, allows remote web sites to cause a denial of service (application instability or system hang) via certain JavaScript.  Assigned (20050218)  None (candidate not yet proposed)    View
9961  CVE-2004-1533  Candidate  Buffer overflow in pop3svr.exe for DMS POP3 1.5.3.27 and earlier allows remote attackers to cause a denial of service (service crash) via a long (1) username or (2) password.  Assigned (20050218)  None (candidate not yet proposed)    View

Page 18951 of 20943, showing 5 records out of 104715 total, starting on record 94751, ending on 94755

Actions