CVE-2011-2123

CVE-2011-2123 affects Adobe Shockwave Player’s Shockwave 3D Asset x32 component. The vulnerability is described as an integer overflow in a DEMX subrecord during parsing, causing a heap-based buffer overflow and enabling remote code execution. Public references identify affected versions as Shock...

CVE-2010-2123

The CVE-2010-2123 entry describes multiple XSS vulnerabilities in Drupal’s Storm module (5.x and 6.x) prior to 6.x-1.33. The root cause is improper handling of user-supplied input in stormorganization, stormperson, stormtask, stormticket, and stormproject actions (via parameters such as fullname,...

CVE-2009-2123

Multiple SQL injection vulnerabilities in Elvin 1.2.0 allow remote attackers to execute arbitrary SQL commands via the 1 inUser aka Username and 2 inPass aka Password parameters to a inc/login.ei, reachable through login.php; and the 3 id parameter to b showbug.php and c showactivity.php. NOTE: i...

CVE-2009-2123

CVE-2009-2123 describes multiple SQL injection vulnerabilities in Elvin 1.2.0 allowing remote attackers to execute arbitrary SQL commands via (1) inUser (Username) and (2) inPass (Password) parameters to inc/login.ei (reachable through login.php); and (3) id parameter to show_bug.php and show_act...

CVE-2009-2123

creationtimestamp| type| source ---|---|--- 2009-06-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8953...

CVE-2008-2123

CVE-2008-2123 describes an XSS vulnerability in SAP Internet Transaction Server (ITS) WGate. The issue affects ITS 6.20 where an attacker can inject arbitrary script or HTML via (1) a “” sequence in the ~service parameter to wgate.dll, or (2) Javascript splicing in the query string (stated as a v...

CVE-2007-2123

Technical details about CVE-2007-2123 are not publicly available in the provided documents. The entries describe an unspecified vulnerability in Oracle Portal across multiple versions; no root cause, impact, or remediation is disclosed here. Monitor for updates.

CVE-2006-2123

CVE-2006-2123 affects Network Administration Visualized (NAV) prior to version 3.0.1. The NAV report interface contains multiple SQL injection vulnerabilities that could allow a remote attacker to execute arbitrary SQL commands via unknown vectors. The underlying issue is untrusted input handling...

WMF and EMF Files (CVE-2005-2123; CVE-2005-2124; CVE-2005-4560; CVE-2006-0020)

...

CVE-2005-2123

CVE-2005-2123 affects the Windows GDI32.DLL Graphics Rendering Engine, with heap-based buffer overflows triggered by crafted WMF/EMF image data. Affected systems include Windows 2000 SP4, XP SP1/SP2, and Server 2003 SP1. Root cause is overflow/unchecked size handling in image rendering, enabling ...

[Full-disclosure] [EEYEB-20050901] Windows Metafile SetPalette Entries Heap OVerflow Vulnerability (Graphics Rendering Engine Vulnerability)

Windows Metafile SetPalette Entries Heap OVerflow Vulnerability Graphics Rendering Engine Vulnerability Release Date: November 8, 2005 Date Reported: September 1, 2005 Severity: High Code Execution Vendor: Microsoft Systems Affected: Windows 2000 Windows XP SP0, SP1 Windows Server 2003 SP0...

Microsoft Security Bulletin MS05-053 Vulnerabilities in Graphics Rendering Engine Could Allow Code Execution (896424)

Microsoft Security Bulletin MS05-053 Vulnerabilities in Graphics Rendering Engine Could Allow Code Execution 896424 Published: November 8, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity...

CVE-2002-2123

The CVE-2002-2123 entry concerns Gallery 1.3.2’s publish_xp_docs.php PHP remote file inclusion vulnerability. An attacker can specify a URL to an init.php in the GALLERY_BASEDIR parameter, enabling arbitrary PHP code execution on the affected system. The affected software/function is publish_xp_d...

CVE-2004-2123

The CVE-2004-2123 entry describes multiple cross-site scripting (XSS) vulnerabilities in Nextplace.com E-Commerce ASP Engine. The issues allow remote attackers to inject arbitrary script/HTML via (1) the level parameter of productdetail.asp, (2) the searchKey parameter of searchresults.asp, and p...