9347 matches found
PT-2023-29318 · Unknown · Easy Address Book Web Server
Name of the Vulnerable Software and Affected Versions: Easy Address Book Web Server version 1.6 Description: The issue is a Stored Cross-Site Scripting vulnerability that affects multiple parameters such as firstname, homephone, lastname, middlename, workaddress, workcity, workcountry, workphone,...
PT-2023-29317 · Unknown · Easy Address Book Web Server
Name of the Vulnerable Software and Affected Versions: Easy Address Book Web Server version 1.6 Description: The issue affects the parameters firstname, homephone, lastname, middlename, workaddress, workcity, workcountry, workphone, workstate, and workzip of the "/addrbook.ghp" file, allowing an...
Easy Address Book Web Server Cross-Site Scripting Vulnerability
Easy Address Book Web Server is a software. A cross-site scripting vulnerability exists in Easy Address Book Web Server version 1.6, which stems from a stored cross-site scripting XSS vulnerability in the usersadmin.ghp file...
CVE-2023-4493: Improper Neutralization of Input During Web Page Generation
Stored Cross-Site Scripting in Easy Address Book Web Server 1.6 version, through the usersadmin.ghp file that affects multiple parameters such as firstname, homephone, lastname, lastname, middlename, workaddress, workcity, workcountry, workphone, workstate, workzip. This vulnerability allows a...
Easy Address Book Web Server Buffer Error Vulnerability
Easy Address Book Web Server is a software. A buffer error vulnerability exists in Easy Address Book Web Server version 1.6, which stems from the presence of a buffer overflow vulnerability. An attacker could exploit the vulnerability by sending a string to /searchbook.ghp to execute arbitrary co...
CVE-2023-4494: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow vulnerability in Easy Chat Server 3.1 version. An attacker could send an excessively long username string to the register.ghp file asking for the name via a GET request resulting in arbitrary code execution on the remote machine...
PT-2023-29319 · Unknown · Easy Chat Server
Name of the Vulnerable Software and Affected Versions: Easy Chat Server version 3.1 Description: A stack-based buffer overflow issue exists due to an excessively long username string being sent to the "register.ghp" file via a GET request, potentially leading to arbitrary code execution on the...
CVE-2023-4491: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow vulnerability in Easy Address Book Web Server 1.6 version. The exploitation of this vulnerability could allow an attacker to send a very long username string to /searchbook.ghp, asking for the name via a POST request, resulting in arbitrary code execution on the remote machine...
Chat Server Buffer Error Vulnerability
Chat Server is ramank775 individual developer's chat server based on microservices architecture that supports high availability, high throughput, and horizontal scaling. A buffer error vulnerability exists in Easy Chat Server version 3.1, which stems from the presence of a buffer overflow...
PT-2023-29322 · Unknown · Easy Chat Server
Name of the Vulnerable Software and Affected Versions: Easy Chat Server versions 3.1 and earlier Description: The issue arises from insufficient encryption of user-controlled inputs, leading to a Cross-Site Scripting XSS vulnerability. This vulnerability is stored via the "/body2.ghp" API endpoin...
CVE-2023-4496: Improper Neutralization of Input During Web Page Generation
Easy Chat Server, in its 3.1 version and before, does not sufficiently encrypt user-controlled inputs, resulting in a Cross-Site Scripting XSS vulnerability stored via /body2.ghp POST method, in the mtowho parameter...
CVE-2023-4495: Improper Neutralization of Input During Web Page Generation
Easy Chat Server, in its 3.1 version and before, does not sufficiently encrypt user-controlled inputs, resulting in a Cross-Site Scripting XSS vulnerability stored via /registresult.htm POST method, in the Resume parameter. The XSS is loaded from /register.ghp...
PT-2023-29316 · Unknown · Easy Address Book Web Server
Name of the Vulnerable Software and Affected Versions: Easy Address Book Web Server version 1.6 Description: The issue is a buffer overflow vulnerability that could allow an attacker to send a very long username string to the "/searchbook.ghp" API endpoint via a POST request, resulting in arbitra...
PT-2023-29320 · Unknown · Easy Chat Server
Name of the Vulnerable Software and Affected Versions: Easy Chat Server versions 3.1 and earlier Description: The issue arises from insufficient encryption of user-controlled inputs, leading to a Cross-Site Scripting XSS vulnerability. This vulnerability is stored via the "POST" method at the...
CVE-2023-4492: Improper Neutralization of Input During Web Page Generation
Vulnerability in Easy Address Book Web Server 1.6 version, affecting the parameters firstname, homephone, lastname, middlename, workaddress, workcity, workcountry, workphone, workstate and workzip of the /addrbook.ghp file, allowing an attacker to inject a JavaScript payload specially designed to...
PT-2023-29324 · Unknown · Easy Chat Server
Name of the Vulnerable Software and Affected Versions: Easy Chat Server versions 3.1 and earlier Description: The issue arises from insufficient encryption of user-controlled inputs, leading to a Cross-Site Scripting XSS vulnerability. This vulnerability is stored via the "/registresult.htm" API...
CVE-2023-40198
Cross-Site Request Forgery CSRF vulnerability in Antsanchez Easy Cookie Law plugin = 3.1 versions...
CVE-2023-40198
Cross-Site Request Forgery CSRF vulnerability in Antsanchez Easy Cookie Law plugin = 3.1 versions...
