CVE List

Id CVE No. Status Description Phase Votes Comments Actions
10620  CVE-2004-2194  Candidate  MailEnable Professional Edition before 1.53 and Enterprise Edition before 1.02 allows remote attackers to cause a denial of service (crash) via malformed (1) SMTP or (2) IMAP commands.  Assigned (20050711)  None (candidate not yet proposed)    View
10621  CVE-2004-2195  Candidate  PHP remote file inclusion vulnerability in index.php in Zanfi CMS lite 1.1 allows remote attackers to execute arbitrary PHP code via the inc parameter.  Assigned (20050711)  None (candidate not yet proposed)    View
10622  CVE-2004-2196  Candidate  Zanfi CMS lite 1.1 allows remote attackers to obtain the full path of the web server via direct requests without required arguments to (1) adm_pages.php, (2) corr_pages.php, (3) del_block.php, (4) del_page.php, (5) footer.php, (6) home.php, and others.  Assigned (20050711)  None (candidate not yet proposed)    View
10623  CVE-2004-2197  Candidate  kdocker.cpp in kdocker 0.1 through 0.8 does not properly check the ownership of files, which could allow local users to execute arbitrary programs.  Assigned (20050711)  None (candidate not yet proposed)    View
10624  CVE-2004-2198  Candidate  account.asp in DUware DUclassmate 1.0 through 1.1 allows remote attackers to change the passwords for arbitrary users by modifying the MM_recordId parameter on the "My Account" page.  Assigned (20050711)  None (candidate not yet proposed)    View

Page 19155 of 20943, showing 5 records out of 104715 total, starting on record 95771, ending on 95775

Actions