CVE-2006-2167

CVE-2006-2167 describes a cross-site scripting (XSS) vulnerability in SloughFlash SF-Users 1.0, potentially in register.php. The flaw allows remote attackers to inject arbitrary web script or HTML by setting the username field to contain JavaScript in the SRC attribute of an IMG element. The affe...

CVE-2004-2167

Multiple buffer overflows in LaTeX2rtf 1.9.15, and possibly other versions, allow remote attackers to execute arbitrary code via 1 the expandmacro function, and possibly 2 Environments and 3 TranslateCommand...

CVE-2004-2167

CVE-2004-2167 affects LaTeX2rtf 1.9.15 (and possibly other versions) with multiple buffer overflows that allow remote code execution via the expandmacro function, and possibly Environments and TranslateCommand. Connected documents confirm the vulnerability but do not provide further exploitation ...

CVE-2002-2167

Directory traversal vulnerability in functionfoot1.inc.php for Thorsten Korner 123tkShop before 0.3.1 allows remote attackers to read arbitrary files via .. dot dot sequences terminated by a null character in the $designNo variable, which is part of an "include" function call...

CVE-2024-2167

This CVE-2024-2167 entry is rejected/not used and does not represent an active vulnerability entry.