# CVEs published 2005-02-12

37 CVEs were published on February 12, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2004-1395](https://cve.now/CVE-2004-1395.md): The Lithtech engine, as used in (1) Contract Jack 1.1 and earlier, (2) No one lives forever 2 1.3 and earlier, (3) Tron 2.0 1.042 and earlie (no CVSS)
- [CVE-2004-1396](https://cve.now/CVE-2004-1396.md): Winamp 5.07 and possibly other versions, allows remote attackers to cause a denial of service (application crash or CPU consumption) via (1) (no CVSS)
- [CVE-2004-1397](https://cve.now/CVE-2004-1397.md): Cross-site scripting (XSS) vulnerability in UseModWiki 1.0 allows remote attackers to inject arbitrary web script or HTML via an argument to (no CVSS)
- [CVE-2004-1398](https://cve.now/CVE-2004-1398.md): Format string vulnerability in prelink.c in kextload in Apple OS X, as used by TDIXSupport in Roxio Toast Titanium and possibly other produc (no CVSS)
- [CVE-2004-1399](https://cve.now/CVE-2004-1399.md): Directory traversal vulnerability in the Attachment module 2.3.10 and earlier for phpBB allows remote attackers to read arbitrary files via (no CVSS)
- [CVE-2004-1400](https://cve.now/CVE-2004-1400.md): The control panel in ASP Calendar does not require authentication to access, which allows remote attackers to gain unauthorized access via a (no CVSS)
- [CVE-2004-1401](https://cve.now/CVE-2004-1401.md): SQL injection vulnerability in verify.asp in Asp-rider allows remote attackers to execute arbitrary SQL statements and bypass authentication (no CVSS)
- [CVE-2004-1402](https://cve.now/CVE-2004-1402.md): SQL injection vulnerability in iWebNegar allows remote attackers to execute arbitrary SQL commands via (1) the string parameter for index.ph (no CVSS)
- [CVE-2004-1403](https://cve.now/CVE-2004-1403.md): PHP remote file inclusion vulnerability in index.php in GNUBoard 3.39 and earlier allows remote attackers to execute arbitrary PHP code by m (no CVSS)
- [CVE-2004-1404](https://cve.now/CVE-2004-1404.md): Attachment Mod 2.3.10 module for phpBB, when used with Apache mod\_mime, does not properly handle files with multiple file extensions, such a (no CVSS)
- [CVE-2004-1405](https://cve.now/CVE-2004-1405.md): MediaWiki 1.3.8 and earlier, when used with Apache mod\_mime, does not properly handle files with two file extensions, such as .php.rar, whic (no CVSS)
- [CVE-2004-1406](https://cve.now/CVE-2004-1406.md): SQL injection vulnerability in ikonboard.cgi in Ikonboard 3.1.0 through 3.1.3 allows remote attackers to inject arbitrary SQL commands via t (no CVSS)
- [CVE-2004-1407](https://cve.now/CVE-2004-1407.md): Multiple directory traversal vulnerabilities in singapore Image Gallery Web Application 0.9.10 allow remote attackers to (1) read arbitrary (no CVSS)
- [CVE-2004-1408](https://cve.now/CVE-2004-1408.md): The addImage method for admin.class.php in Image Gallery Web Application 0.9.10 does not properly check filenames, which allows remote attac (no CVSS)
- [CVE-2004-1409](https://cve.now/CVE-2004-1409.md): Multiple cross-site scripting vulnerabilities in Image Gallery Web Application 0.9.10 allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2004-1410](https://cve.now/CVE-2004-1410.md): Cross-site scripting (XSS) vulnerability in Gadu-Gadu build 155 and earlier allows remote attackers to inject arbitrary web script via a URL (no CVSS)
- [CVE-2004-1411](https://cve.now/CVE-2004-1411.md): Gadu-Gadu build 155 and earlier allows remote attackers to cause a denial of service (infinite loop) via a message that contains an image wh (no CVSS)
- [CVE-2004-1412](https://cve.now/CVE-2004-1412.md): Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.x allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2004-1413](https://cve.now/CVE-2004-1413.md): Multiple SQL injection vulnerabilities in Kayako eSupport 2.x allow remote attackers to execute arbitrary SQL commands via the (1) subcat, ( (no CVSS)
- [CVE-2004-1414](https://cve.now/CVE-2004-1414.md): Gadu-Gadu 6.1 build 156 allows remote attackers to cause a denial of service (application hang) via a message that contains many special str (no CVSS)
- [CVE-2004-1415](https://cve.now/CVE-2004-1415.md): SQL injection vulnerability in (1) disp\_album.php and possibly (2) disp\_img.php in 2Bgal 2.4 and 2.5.1 allows remote attackers to execute ar (no CVSS)
- [CVE-2004-1416](https://cve.now/CVE-2004-1416.md): pnxr3260.dll in the RealOne 2.0 build 6.0.11.868 browser plugin, as used in Internet Explorer, allows remote attackers to cause a denial of (no CVSS)
- [CVE-2004-1417](https://cve.now/CVE-2004-1417.md): Cross-site scripting (XSS) vulnerability in login.php in PsychoStats 2.2.4 Beta and earlier allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2004-1418](https://cve.now/CVE-2004-1418.md): Cross-site scripting (XSS) vulnerability in WPKontakt 3.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a (no CVSS)
- [CVE-2004-1419](https://cve.now/CVE-2004-1419.md): PHP remote file inclusion vulnerability in ZeroBoard 4.1pl4 and earlier allows remote attackers to execute arbitrary PHP code by modifying t (no CVSS)
- [CVE-2004-1420](https://cve.now/CVE-2004-1420.md): Multiple cross-site scripting (XSS) vulnerabilities in header.php in WHM AutoPilot 2.4.6.5 and earlier allow remote attackers to inject arbi (no CVSS)
- [CVE-2004-1421](https://cve.now/CVE-2004-1421.md): Multiple PHP remote file inclusion vulnerabilities (1) step\_one.php, (2) step\_one\_tables.php, (3) step\_two\_tables.php in WHM AutoPilot 2.4.6 (no CVSS)
- [CVE-2004-1422](https://cve.now/CVE-2004-1422.md): WHM AutoPilot 2.4.6.5 and earlier allows remote attackers to gain sensitive information via phpinfo, which reveals php settings. (no CVSS)
- [CVE-2004-1423](https://cve.now/CVE-2004-1423.md): Multiple PHP remote file inclusion vulnerabilities in Sean Proctor PHP-Calendar before 0.10.1, as used in Commonwealth of Massachusetts Virt (no CVSS)
- [CVE-2004-1424](https://cve.now/CVE-2004-1424.md): Cross-site scripting (XSS) vulnerability in view.php in Moodle 1.4.2 and earlier allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2004-1425](https://cve.now/CVE-2004-1425.md): Directory traversal vulnerability in file.php in Moodle 1.4.2 and earlier allows remote attackers to read arbitrary session files for known (no CVSS)
- [CVE-2004-1426](https://cve.now/CVE-2004-1426.md): Directory traversal vulnerability in index.php in KorWeblog 1.6.2-cvs and earlier allows remote attackers to read arbitrary files and execut (no CVSS)
- [CVE-2004-1427](https://cve.now/CVE-2004-1427.md): PHP remote file inclusion vulnerability in main.inc in KorWeblog 1.6.2-cvs and earlier allows remote attackers to execute arbitrary PHP code (no CVSS)
- [CVE-2004-1428](https://cve.now/CVE-2004-1428.md): ArGoSoft FTP before 1.4.2.1 generates an error message if the user name does not exist instead of prompting for a password, which allows rem (no CVSS)
- [CVE-2004-1429](https://cve.now/CVE-2004-1429.md): ArGoSoft FTP 1.4.2.4 and earlier does not limit the number of times that a bad password can be entered, which makes it easier for remote att (no CVSS)
- [CVE-2004-1430](https://cve.now/CVE-2004-1430.md): SQL injection vulnerability in the show\_stats module in Arcade.php in IbProArcade allows remote attackers to execute arbitrary SQL code via (no CVSS)
- [CVE-2004-1431](https://cve.now/CVE-2004-1431.md): FormMail.php 5.0, and possibly other versions, allows remote attackers to read arbitrary files via a full pathname in the ar\_file (auto-repl (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-02-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.