Easy FTP Pro 4.2 iOS - Command Injection

Easy FTP Pro 4.2 iOS - Command Injection Document Title: =============== Easy FTP Pro v4.2 iOS - Command Inject Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1291 Release Date: ============= 2014-08-06 Vulnerability Laboratory ID VL-ID:...

CVE-2014-5178

Multiple cross-site scripting XSS vulnerabilities in Easy File Sharing EFS Web Server 6.8 allow remote authenticated users to inject arbitrary web script or HTML via the content parameter when 1 creating a topic or 2 posting an answer. NOTE: some of these details are obtained from third party...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Easy File Sharing EFS Web Server 6.8 allow remote authenticated users to inject arbitrary web script or HTML via the content parameter when 1 creating a topic or 2 posting an answer. NOTE: some of these details are obtained from third party...

CVE-2014-5178

Multiple cross-site scripting XSS vulnerabilities in Easy File Sharing EFS Web Server 6.8 allow remote authenticated users to inject arbitrary web script or HTML via the content parameter when 1 creating a topic or 2 posting an answer. NOTE: some of these details are obtained from third party...

CVE-2014-5178

CVE-2014-5178 affects Easy File Sharing (EFS) Web Server 6.8. The vulnerability is cross-site scripting (XSS) triggered by the content parameter during topic creation or when posting an answer, exploitable by remote authenticated users. The provided documents do not specify a patch or a remediati...

CVE-2014-5178: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Easy File Sharing EFS Web Server 6.8 allow remote authenticated users to inject arbitrary web script or HTML via the content parameter when 1 creating a topic or 2 posting an answer. NOTE: some of these details are obtained from third party...

Easy Banners 1.4 - Cross-Site Scripting (XSS)

The easy-banners WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

WP Socializer 2.4.2 - admin/wpsr-services-selector.php val Parameter XSS

The WP Socializer – Simple & Easy Social Media Share Icons WordPress plugin was affected by an admin/wpsr-services-selector.php val Parameter XSS security vulnerability...

Event Easy Calendar 1.0.0 - Multiple Administrator Action CSRF

The event-easy-calendar WordPress plugin was affected by a Multiple Administrator Action CSRF security vulnerability...

Event Easy Calendar 1.0.0 - Multiple Unspecified XSS

The event-easy-calendar WordPress plugin was affected by a Multiple Unspecified XSS security vulnerability...

Really Easy Slider 0.1 - Shell Upload

The really-easy-slider WordPress plugin was affected by a Shell Upload security vulnerability...

WP Easy Gallery <= 1.7 - Cross-Site Scripting (XSS)

The WP Easy Gallery – WordPress Gallery Plugin WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

Easy Contact Forms Export 1.1.0 - Information Disclosure

The easy-contact-forms-exporter WordPress plugin was affected by an Information Disclosure security vulnerability...

Easy Media Gallery 1.2.25 - includes/emg-settings.php spg_add_admin Function Admin User Creation CSRF

The Gallery – Photo Albums Plugin WordPress plugin was affected by an includes/emg-settings.php spgaddadmin Function Admin User Creation CSRF security vulnerability...

WordPress Easy Media Gallery Plugin <= 1.2.25 - CSRF

This plugin is prone to a cross site request forgery vulnerability in includes/emg-settings.php spgaddadmin function. Solution Update the plugin...

UBUNTU-CVE-2014-3564

Multiple heap-based buffer overflows in the statushandler function in 1 engine-gpgsm.c and 2 engine-uiserver.c in GPGME before 1.5.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to "different line lengths in a specific order."...

WordPress Over Easy Theme - Remote Code Execution

There are a bug in this theme, that allows any website visitor to run and see the output of any shortcode. This gives unauthenticated visitors the same power to execute code on the server as regular publishers have. Solution Update the theme...

VulnCheck KEV: CVE-2019-25141

The Easy WP SMTP plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 1.3.9. This is due to missing capability checks on the admininit function, in addition to insufficient input validation. This makes it possible for unauthenticated attackers to modify the...

Detours to modify the paragraph properties of vulnerability-vulnerability warning-the black bar safety net

Detours to modify the paragraph properties of the vulnerability Affected Software and systems Detours3. 0 and previous versions Description This issue will be its positioning as a vulnerability may be less suitable, the more likely that Detours a BUG, but because the defect will cause the exploit...

JAX-RS: Information disclosure via XML eXternal Entity (XXE)

It was found that the default context parameters as provided to RESTEasy deployments by JBoss EAP did not explicitly disable external entity expansion for RESTEasy. A remote attacker could use this flaw to perform XML External Entity XXE attacks on RESTEasy applications accepting XML input...