返回 CVE 浏览器

CVE-2004-2453

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1960%

EPSS Percentile21.64th

Published2004年12月31日

Last Modified2026年4月16日

Vulnerability Description

Unknown vulnerability in Tutti Nova 0.10 through 0.12 (Beta) and 0.9.4, when register_globals is enabled, has unknown impact and attack vectors.

Affected Platforms (CPE)

📦

Tutti Nova

Tutti Nova

= 0.9.4

📦

Tutti Nova

Tutti Nova

= 0.10_beta

📦

Tutti Nova

Tutti Nova

= 0.11_beta

📦

Tutti Nova

Tutti Nova

= 0.12_beta

References & Advisories

🔗 http://secunia.com/advisories/12467

🔗 http://sourceforge.net/project/shownotes.php?release_id=265832

🔗 http://www.osvdb.org/9741

🔗 http://www.securityfocus.com/bid/11127

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/17279

🔗 http://secunia.com/advisories/12467

🔗 http://sourceforge.net/project/shownotes.php?release_id=265832

🔗 http://www.osvdb.org/9741

相关漏洞威胁

CVE-2006-42767.5

PHP remote file inclusion vulnerability in Tutti Nova 1.6 and earlier allows remote attackers to execute arbitrary PHP code via a ...

CVE-2006-42777.5

Multiple PHP remote file inclusion vulnerabilities in Tutti Nova 1.6 and earlier allow remote attackers to execute arbitrary PHP c...

CVE-2004-041810.0

serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow ...

CVE-2004-101210.0

The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arb...