CVE-2004-1947

The AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online allows remote attackers to (1) obtain sensitive information such as system drives and contents or (2) use the RequestFile method to download and execute arbitrary code via an object codebase that uses bitdefender.cab.

• http://marc.info/?l=bugtraq&m=108240639427412&w=2
• http://marc.info/?l=bugtraq&m=108248367901616&w=2
• http://secunia.com/advisories/11427Exploit, Vendor Advisory
• http://securitytracker.com/id?1009862
• http://www.osvdb.org/5549
• http://www.securityfocus.com/bid/10174
• http://www.securityfocus.com/bid/10175Exploit, Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15911
• http://marc.info/?l=bugtraq&m=108240639427412&w=2
• http://marc.info/?l=bugtraq&m=108248367901616&w=2
• http://secunia.com/advisories/11427Exploit, Vendor Advisory
• http://securitytracker.com/id?1009862
• http://www.osvdb.org/5549
• http://www.securityfocus.com/bid/10174
• http://www.securityfocus.com/bid/10175Exploit, Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15911

Published

Apr 19, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-1941Fastream NETFile FTP/Web Server 6.5.1.980 allows remote atta…
• CVE-2004-1942The Solaris 9 patches 113579-02 through 113579-05, and 11434…
• CVE-2004-1943PHP remote file inclusion vulnerability in album_portal.php …
• CVE-2004-1944Eudora 6.1 and 6.0.3 for Windows allows remote attackers to …
• CVE-2004-1945Buffer overflow in Kinesphere eXchange POP3 allows remote at…
• CVE-2004-1946Format string vulnerability in the PRINT_ERROR function in c…
• CVE-2004-1948NcFTP client 3.1.6 and 3.1.7, when the username and password…
• CVE-2004-1949SQL injection vulnerability in PostNuke 7.2.6 and earlier al…
• CVE-2004-1950phpBB 2.0.8a and earlier trusts the IP address that is in th…
• CVE-2004-1951xine 1.x alpha, 1.x beta, and 1.0rc through 1.0rc3a, and xin…
• CVE-2004-1952SQL injection vulnerability in Advanced Guestbook 2.2 allows…
• CVE-2004-1953phProfession 2.5 allows remote attackers to gain sensitive i…