# CVEs published 2005-08-04

16 CVEs were published on August 4, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2003-1219](https://cve.now/CVE-2003-1219.md): Cross-site scripting (XSS) vulnerability in the tep\_href\_link function in html\_output.php for osCommerce before 2.2-MS3 allows remote attack (no CVSS)
- [CVE-2004-2286](https://cve.now/CVE-2004-2286.md): Integer overflow in the duplication operator in ActivePerl allows remote attackers to cause a denial of service (crash) and possibly execute (no CVSS)
- [CVE-2004-2287](https://cve.now/CVE-2004-2287.md): Directory traversal vulnerability in explorer.php in DSM Light Web File Browser 2.0 allows remote attackers to read arbitrary files via .. (no CVSS)
- [CVE-2004-2288](https://cve.now/CVE-2004-2288.md): Cross-site scripting (XSS) vulnerability in index.php in Jelsoft vBulletin allows remote attackers to spoof parts of a website via the loc p (no CVSS)
- [CVE-2004-2289](https://cve.now/CVE-2004-2289.md): Microsoft Windows XP Explorer allows local users to execute arbitrary code via a system folder with a Desktop.ini file containing a .ShellCl (no CVSS)
- [CVE-2004-2290](https://cve.now/CVE-2004-2290.md): Microsoft Windows XP Explorer allows attackers to execute arbitrary code via a HTML and script in a self-executing folder that references an (no CVSS)
- [CVE-2004-2291](https://cve.now/CVE-2004-2291.md): Microsoft Windows Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via an embedded script that uses Shell Hel (no CVSS)
- [CVE-2004-2292](https://cve.now/CVE-2004-2292.md): Buffer overflow in Alt-N MDaemon 7.0.1 allows remote attackers to cause a denial of service (application crash) via a long STATUS command to (no CVSS)
- [CVE-2004-2293](https://cve.now/CVE-2004-2293.md): Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.0 to 7.3 allow remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2004-2294](https://cve.now/CVE-2004-2294.md): Canonicalize-before-filter error in the send\_review function in the Reviews module for PHP-Nuke 6.0 to 7.3 allows remote attackers to inject (no CVSS)
- [CVE-2004-2295](https://cve.now/CVE-2004-2295.md): SQL injection vulnerability in the Reviews module in PHP-Nuke 6.0 to 7.3 allows remote attackers to execute arbitrary SQL commands via the o (no CVSS)
- [CVE-2004-2296](https://cve.now/CVE-2004-2296.md): The preview\_review function in the Reviews module in PHP-Nuke 6.0 to 7.3, when running on Windows systems, allows remote attackers to obtain (no CVSS)
- [CVE-2004-2297](https://cve.now/CVE-2004-2297.md): The Reviews module in PHP-Nuke 6.0 to 7.3 allows remote attackers to cause a denial of service (CPU and memory consumption) via a large, out (no CVSS)
- [CVE-2005-2453](https://cve.now/CVE-2005-2453.md): Cross-site scripting (XSS) vulnerability in NetworkActiv Web Server 1.0, 2.0.0.6, 3.0.1.1, and 3.5.13, and possibly other versions, allows r (no CVSS)
- [CVE-2005-2455](https://cve.now/CVE-2005-2455.md): Greasemonkey before 0.3.5 allows remote web servers to (1) read arbitrary files via a GET request to a file:// URL in the GM\_xmlhttpRequest (no CVSS)
- [CVE-2005-2456](https://cve.now/CVE-2005-2456.md): Array index overflow in the xfrm\_sk\_policy\_insert function in xfrm\_user.c in Linux kernel 2.6 allows local users to cause a denial of servic (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-08-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.