8581 matches found
CVE-2006-5713
CVE-2006-5713 describes an XSS vulnerability in Easy File Sharing (EFS) Web Server 4.0. The issue allows remote attackers to inject arbitrary web script or HTML through the forum-thread posting parameters: author, content, or title. The metadata indicates cross-site scripting with no confidential...
CVE-2006-5715
CVE-2006-5715 affects Easy File Sharing (EFS) Easy Address Book 1.2 when run on NTFS. The vulnerability allows remote attackers to read arbitrary files under the web root by appending the ADS suffix ::$DATA to an HTTP GET, accessing an alternate data stream. The description confirms the root caus...
XM Easy Personal FTP Server 5.2.1 - Remote Denial of Service
XM Easy Personal FTP Server 5.2.1 - Remote Denial of Service !/usr/bin/perl Title: XM Easy Personal FTP Server new PeerAddr = $ARGV0, PeerPort = $remotePort, Proto = "TCP" bannerExploit; print " + Establishing connection at " . $ARGV0 . ":" . $remotePort . "\n"; print $socket "USER "...
XM Easy Personal FTP Server <= 5.2.1 Remote Denial of Service Exploit
Exploit for unknown platform in category dos / poc ===================================================================== XM Easy Personal FTP Server new PeerAddr = $ARGV0, PeerPort = $remotePort, Proto = "TCP" bannerExploit; print " + Establishing connection at " . $ARGV0 . ":" . $remotePort...
XM Easy Personal FTP Server 5.2.1 - Remote Denial of Service
!/usr/bin/perl Title: XM Easy Personal FTP Server new PeerAddr = $ARGV0, PeerPort = $remotePort, Proto = "TCP" bannerExploit; print " + Establishing connection at " . $ARGV0 . ":" . $remotePort . "\n"; print $socket "USER " . $remoteUsername . "\r\n"; print " FTP Username: '" . $remoteUsername...
CVE-2006-5662
SQL injection vulnerability in easy notesManager eNM 0.0.1 allows remote attackers to execute arbitrary SQL commands via 1 the username parameter in login.php and 2 a search on the "search page."...
CVE-2006-5662
CVE-2006-5662 describes an SQL injection in easy notesManager (eNM) 0.0.1. The vulnerability allows remote attackers to execute arbitrary SQL via the username parameter in login.php and via a search on the search page. The available records do not specify affected versions beyond 0.0.1, nor provi...
CVE-2006-5662
SQL injection vulnerability in easy notesManager eNM 0.0.1 allows remote attackers to execute arbitrary SQL commands via 1 the username parameter in login.php and 2 a search on the "search page."...
EFS Easy Address Book Web Server 1.2 - Remote File Stream
EFS Easy Address Book Web Server 1.2 - Remote File Stream / ========================================================================== 0-day Alternative File Stream Exploit for EFS Easy Address Book Web Server =========================================================================== EFS' Easy...
EFS Easy Address Book Web Server <= 1.2 Remote File Stream Exploit
Exploit for unknown platform in category remote exploits ================================================================== EFS Easy Address Book Web Server GLinares.code at gmail dot com This tool demonstrates EFS' Easy Address Book Web Server Vulnerability to Alternative Data Stream GET request...
easy notes manager sql injection and authentication bypass
easy notes manager eNM version 0.0.1, available at http://217.172.179.216/evandor/html/index.php?id=103 is affected by multiple sql injection vulnerability due to a missing check of the user supplied input. An attacker can bypass the authentication procedure and get a full dump of the database...
Easy File Sharing Web Server 4 Remote Information Stealer Exploit
No description provided by source. / =================================================================== 0-day Alternative File Stream Exploit for Easy File Share Server 4 =================================================================== Exploit allows malicious users to grab files from the...
Easy Web Portal 2.1.2 - Multiple Remote File Inclusions
source: https://www.securityfocus.com/bid/20825/info Easy Web Portal is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...
Easy Web Portal 2.1.2 - Multiple Remote File Inclusions
Easy Web Portal 2.1.2 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/20825/info Easy Web Portal is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to...
Easy File Sharing Web Server 4 - Remote Information Stealer
/ =================================================================== 0-day Alternative File Stream Exploit for Easy File Share Server 4 =================================================================== Exploit allows malicious users to grab files from the server without being authenticated...
Evandor Easy notesManager 0.0.1 - Search Page SQL Injection
Evandor Easy notesManager 0.0.1 - Search Page SQL Injection source: https://www.securityfocus.com/bid/20803/info Easy notesManager is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit coul...
Easy File Sharing Web Server 4 Remote Information Stealer Exploit
Exploit for unknown platform in category remote exploits ================================================================= Easy File Sharing Web Server 4 Remote Information Stealer Exploit ================================================================= /...
Evandor Easy notesManager 0.0.1 - Search Page SQL Injection
source: https://www.securityfocus.com/bid/20803/info Easy notesManager is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the application, access or...
Def-Blog <= v1.0.1 (article) Remote SQL Injection Exploit
============================================================================================== Def-Blog = v1.0.1 article Remote SQL Injection Exploit =============================================================================================== Critical Level : Dangerous Venedor site :...
Def-Blog 1.0.3 - comadd.php SQL Injection
Def-Blog 1.0.3 - comadd.php SQL Injection ============================================================================================== Def-Blog = v1.0.1 article Remote SQL Injection Exploit =============================================================================================== Critical...