CVE-2010-2128

The CVE-2010-2128 entry affects the Joomla! component JE Quotation Form (com_jequoteform) version 1.0b1, which contains a local file inclusion vulnerability caused by an unsafe directory traversal in the view parameter passed to index.php. This allows remote attackers to read arbitrary files on t...

openSUSE Security Update : cifs-mount (cifs-mount-2128)

With enabled 'wide links' samba follows symbolic links on the server side, therefore allowing clients to overwrite arbitrary files CVE-2010-0926. This update changes the default setting to have 'wide links' disabled by default. The new default only works if 'wide links' is not set explicitly in...

Microsoft DirectShow AVI Decoder Buffer Overflow (MS05-050; CVE-2005-2128)

Microsoft DirectX is a set of low-level application programming interfaces APIs for creating high-performance multimedia applications. Microsoft DirectShow is an architecture for streaming media on the Microsoft Windows platform and provides for the capture and playback of multimedia streams. It...

CVE-2009-2128

The CVE-2009-2128 entry concerns Elvin before 1.2.1, where a SQL injection in close_bug.php (via the title/subject parameter) allows remote attackers to run arbitrary SQL commands. Affected software is Elvin; vulnerable component is close_bug.php handling the title field. The impact is remote cod...

Fedora Core 9 FEDORA-2009-2128 (libpng)

The remote host is missing an update to libpng announced via advisory FEDORA-2009-2128. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2008-2128

PHP remote file inclusion vulnerability in templates/header.php in CMS Faethon 2.2 Ultimate allows remote attackers to execute arbitrary PHP code via a URL in the mainpath parameter, a different vulnerability than CVE-2006-5588 and CVE-2006-3185...

CVE-2008-2128

CVE-2008-2128 describes a PHP remote file inclusion in CMS Faethon 2.2 Ultimate (templates/header.php) that allows an attacker to execute arbitrary PHP code via the mainpath parameter. This aligns with related Faethon RFI issues documented for earlier versions (e.g., 2.0/1.3.2) and is supported b...

CVE-2008-2128

creationtimestamp| type| source ---|---|--- 2008-05-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5558...

CVE-2007-2128

Technical details for CVE-2007-2128 are not publicly available in the provided documents. The initial entry describes an unspecified vulnerability in Oracle E-Business Suite Sales Online with unknown impact and remote authenticated vectors. No concrete affected components, root cause, or remediat...

CVE-2006-2128

CVE-2006-2128 affects Pro Publish 2.0. The provided sources describe multiple SQL injection vulnerabilities in the application, exploitable via specific request parameters to several pages: (1) admin/login.php with email/password, (2) search.php with find_str, (3) art.php with artid, and (4) cat....

CVE-2005-2128

QUARTZ.DLL in Microsoft Windows Media Player 9 allows remote attackers to write a null byte to arbitrary memory via an AVI file with a crafted strn element with a modified length value...

CVE-2005-2128

The CVE-2005-2128 issue affects Microsoft DirectShow (QUARTZ.DLL) used by Windows Media Player 9. A lack of validation of the AVI file’s strn element length allows a crafted .avi to cause a memory write (null byte) to an arbitrary location, enabling remote code execution. The vulnerability is exp...

MS05-050: Vulnerability in DirectShow Could Allow Remote Code Execution (904706)

The remote host contains a version of DirectX that is vulnerable to a remote code execution flaw. To exploit this flaw, an attacker would need to send a specially malformed .avi file to a user on the remote host and have him open it. C Tenable Network Security, Inc. include"compat.inc"; if...

Microsoft DirectShow buffer overflow

Overview A buffer overflow in Microsoft DirectShow may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft DirectShow is a programming architecture for streaming multimedia on the Microsoft Windows platform. An input validation error in...

CVE-2005-2202

Cross-site scripting XSS vulnerability in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2004-2128

CVE-2004-2128 concerns a cross-site scripting (XSS) vulnerability in BRS WebWeaver 1.07 . According to the CVE records, the issue allows remote attackers to execute arbitrary script as other users by crafting a malicious query string to ISAPISkeleton.dll . The vulnerability is described across mu...