CVE-2009-1988

Unspecified vulnerability in the PeopleSoft Enterprise HRMS eProfile Manager component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 19, and 9.0 Bundle 9 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2008-1988

CVE-2008-1988 describes an unrestricted file upload in EncapsGallery 2.0.2. The flaw exists in the file_upload function of core/misc.class.php, allowing remote authenticated administrators to upload and execute arbitrary PHP files by using an executable extension, then accessing the file directly...

CVE-2007-1988

CVE-2007-1988: XSS in PHPEcho CMS 2.0 caused by kernel/filters.inc.php handling the id parameter. Remote attacker can inject arbitrary script/HTML. The NVD CVSS2 base score is 4.3 (Medium) with no confidentiality/availability impact, partial integrity impact. No exploitation details or remediatio...

CVE-2006-1988

The CVE-2006-1988 entry concerns Apple Safari 2.0.3 where the WebTextRenderer(WebInternal) _CG_drawRun:style:geometry: function can be triggered by an HTML LI tag containing a very large VALUE attribute. This condition triggers a null dereference in QPainter::drawText, likely from a failed memory...

CVE-2005-1988

The CVE-2005-1988 entry describes a remote code execution vulnerability in Microsoft Internet Explorer (versions 5.0, 5.5, and 6.0) caused by memory corruption in the JPEG image rendering component. A crafted JPEG image (delivered via a malicious webpage or HTML email) could trigger a buffer over...

MS05-038: Cumulative Security Update for Internet Explorer (896727)

The remote host contains a version of the Internet Explorer that is vulnerable to multiple security flaws JPEG Rendering, Web Folder, COM Object that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit this web pag...

CVE-2002-1988

CVE-2002-1988 affects Resin 2.1.1. The vulnerability allows remote attackers to cause a denial of service through a request containing long variables targeting non-existent resources, leading to memory consumption and a potential hang of the server. Root cause is tied to processing lengthy query/...

CVE-2004-1988

The CVE-2004-1988 entry documents a PHP remote file inclusion in Coppermine Photo Gallery 1.2.0 RC4. The vulnerability arises when the CPG_M_DIR setting is manipulated to reference a URL on a remote server that serves functions.inc.php, allowing an attacker to execute arbitrary PHP code on the af...

CVE-2004-1988

PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4 allows remote attackers to execute arbitrary PHP code by modifying the CPGMDIR to reference a URL on a remote web server that contains functions.inc.php...