CVE List

Id CVE No. Status Description Phase Votes Comments Actions
9942  CVE-2004-1514  Candidate  04WebServer 1.42 allows remote attackers to cause a denial of service (fail to restart properly) via an HTTP request for an MS-DOS device name such as COM2.  Assigned (20050218)  None (candidate not yet proposed)    View
9943  CVE-2004-1515  Candidate  SQL injection vulnerability in (1) ttlast.php and (2) last10.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL statements via the fsel parameter, as demonstrated using last.php.  Assigned (20050218)  None (candidate not yet proposed)    View
9944  CVE-2004-1516  Candidate  CRLF injection vulnerability in index.php in phpWebSite 0.9.3-4 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the block_username parameter in the user module.  Assigned (20050218)  None (candidate not yet proposed)    View
9945  CVE-2004-1517  Candidate  Zone Labs IMsecure and IMsecure Pro before 1.5 allow remote attackers to bypass Active Link Filtering via an instant message containing a URL with hex encoded file extenstions.  Assigned (20050218)  None (candidate not yet proposed)    View
9946  CVE-2004-1518  Candidate  SQL injection vulnerability in follow.php in Phorum 5.0.12 and earlier allows remote authenticated users to execute arbitrary SQL command via the forum_id parameter.  Assigned (20050218)  None (candidate not yet proposed)    View

Page 19763 of 20943, showing 5 records out of 104715 total, starting on record 98811, ending on 98815

Actions