87 matches found
CVE-2007-2167
The CVE-2007-2167 issue affects AimStats 3.2 and is caused by a vulnerability in process.php where the number parameter in an update action allows remote attackers to inject PHP code into config.php. This is a static code injection scenario that could enable arbitrary code execution in the PHP en...
CVE-2006-2167
Cross-site scripting XSS vulnerability in SloughFlash SF-Users 1.0, possibly in register.php, allows remote attackers to inject arbitrary web script or HTML by setting the username field to contain JavaScript in the SRC attribute of an IMG element...
CVE-2006-2167
CVE-2006-2167 describes a cross-site scripting (XSS) vulnerability in SloughFlash SF-Users 1.0, potentially in register.php. The flaw allows remote attackers to inject arbitrary web script or HTML by setting the username field to contain JavaScript in the SRC attribute of an IMG element. The affe...
CVE-2004-2167
CVE-2004-2167 affects LaTeX2rtf 1.9.15 (and possibly other versions) with multiple buffer overflows that allow remote code execution via the expandmacro function, and possibly Environments and TranslateCommand. Connected documents confirm the vulnerability but do not provide further exploitation ...
CVE-2004-2167
Multiple buffer overflows in LaTeX2rtf 1.9.15, and possibly other versions, allow remote attackers to execute arbitrary code via 1 the expandmacro function, and possibly 2 Environments and 3 TranslateCommand...
CVE-2002-2167
Directory traversal vulnerability in functionfoot1.inc.php for Thorsten Korner 123tkShop before 0.3.1 allows remote attackers to read arbitrary files via .. dot dot sequences terminated by a null character in the $designNo variable, which is part of an "include" function call...