CVE-2018-18912: Out-of-bounds Write

An issue was discovered in Easy File Sharing EFS Web Server 7.2. A stack-based buffer overflow vulnerability occurs when a malicious POST request has been made to forum.ghp upon creating a new topic in the forums, which allows remote attackers to execute arbitrary code...

PT-2019-9667

Name of the Vulnerable Software and Affected Versions Easy File Sharing EFS Web Server version 7.2 Description A stack-based buffer overflow issue occurs when a malicious POST request is made to the "forum.ghp" endpoint upon creating a new topic in the forums. This allows remote attackers to...

PT-2018-18821

Name of the Vulnerable Software and Affected Versions Easy File Sharing EFS Web Server version 7.2 Description The issue is related to a stack-based buffer overflow that allows remote attackers to execute arbitrary code. This can be achieved by sending a malicious login request to the 'forum.ghp'...

CVE-2018-9059: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Easy File Sharing EFS Web Server 7.2 allows remote attackers to execute arbitrary code via a malicious login request to forum.ghp. NOTE: this may overlap CVE-2014-3791...

PT-2014-6317

Name of the Vulnerable Software and Affected Versions Easy File Sharing EFS Web Server version 6.8 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via the content parameter when creating a topic or posting an answer, potentially leading to cross-site...

CVE-2014-5178: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Easy File Sharing EFS Web Server 6.8 allow remote authenticated users to inject arbitrary web script or HTML via the content parameter when 1 creating a topic or 2 posting an answer. NOTE: some of these details are obtained from third party...

CVE-2014-3791: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Easy File Sharing EFS Web Server 6.8 allows remote attackers to execute arbitrary code via a long string in a cookie UserID parameter to vfolder.ghp...

PT-2014-5503

Name of the Vulnerable Software and Affected Versions Easy File Sharing EFS Web Server version 6.8 Description The issue is a stack-based buffer overflow that allows remote attackers to execute arbitrary code. This is achieved by sending a long string in the UserID parameter to the "vfolder.ghp"...

CVE-2009-4809: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in thumbnail.ghp in Easy File Sharing EFS Web Server 4.8 allows remote attackers to read arbitrary files via a .. dot dot in the vfolder parameter...

CVE-2006-5714: Undefined Security Weakness

Easy File Sharing EFS Web Server 4.0, when running on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending "::$DATA" to the end of a HTTP GET request, which accesses the alternate data stream...

CVE-2006-5713: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Easy File Sharing EFS Web Server 4.0 allows remote attackers to inject arbitrary web script or HTML via the 1 author, 2 content, or 3 title parameters when posting a forum thread. NOTE: the provenance of this information is unknown; the details are obtain...

CVE-2003-1297: Undefined Security Weakness

Easy File Sharing EFS Web Server 1.2 stores the 1 option.ini aka options.ini file and 2 log directory under the web root with insufficient access control, which allows remote attackers to obtain sensitive information including an SMTP account username and password hash, the server configuration,...

CVE-2003-1296: Undefined Security Weakness

Easy File Sharing EFS Web Server 1.2 allows remote authenticated users to cause a denial of service via 1 an "empty symbol" in the Title field or 2 certain data in the Your Message field, possibly a long argument...

CVE-2006-1160: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote attackers to inject arbitrary web script or HTML via the Description field in creating a folder or uploading a file...

CVE-2006-1161: Undefined Security Weakness

Absolute path traversal vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote registered users to execute arbitrary code by uploading a malicious file to the Windows startup folder...

CVE-2006-1159: Undefined Security Weakness

Format string vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in the query string argument in an HTTP GET request...