First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2004-1497

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Web Forums Server 1.6 and 2.0 Power Pack stores passwords in plaintext in the Username.ini file, which allows local users to gain privileges.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: Dec 31, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-14987.5SQL injection vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary SQL commands CVE-2004-14994.3Cross-site scripting (XSS) vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary CVE-2004-15002.1Format string vulnerability in the Lithtech engine, as used in multiple games, allows remote authenticated users to cause a denial of servic CVE-2004-15015.0The webmail service in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service (CPU and memory consump CVE-2004-15025.0The Telnet proxy in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service (socket exhaustion) via a CVE-2004-15035.0Integer overflow in the InitialDirContext in Java Runtime Environment (JRE) 1.4.2, 1.5.0 and possibly other versions allows remote attackers CVE-2004-15045.0The displaycontent function in config.php for Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to gain sensitive information v CVE-2004-15057.5Directory traversal vulnerability in index.php in Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to read arbitrary files and CVE-2004-15064.3Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar allow remote attackers to inject arbitrary web script via (1) view_entry.CVE-2004-15075.0CRLF injection vulnerability in login.php in WebCalendar allows remote attackers to inject CRLF sequences via the return_path parameter and CVE-2004-15087.5init.php in WebCalendar allows remote attackers to execute arbitrary local PHP scripts via the user_inc parameter.CVE-2004-15095.0validate.php in WebCalendar allows remote attackers to gain sensitive information via an invalid encoded_login parameter, which reveals the

CVE-2004-1497: Medium severity, CVSS 4.6 | Vulnix