CVE-2004-2465: Undefined Security Weakness

Cross-site scripting XSS vulnerability in chat.ghp in Easy Chat Server 1.2 allows remote attackers to inject arbitrary web script or HTML via the username parameter...

easymsgb_advisory.txt

============================================================ ============================================================ Title: Easy Message Board Directory Traversal and Remote Command Execution Vulnerability discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 08/05/2005...

CVE-2005-2479

CVE-2005-2479 affects Quick 'n Easy FTP Server 3.0. The OpenVAS entry and CVE references confirm a denial-of-service via a long USER command, enabling remote attackers to crash the application or cause CPU exhaustion. No vendor/version remediation or workaround is documented in the provided mater...

quickDoS.txt

Details: ======== Input to the user commands is not properly checked and/or filtered. Issuing a long argument to the user about 1024 caracteres commands will cause the corresponding process to die without any error message. this vulnerabilities exist in both the professionnal version 3.0 and lite...

CVE-2005-2479: Undefined Security Weakness

Quick 'n Easy FTP Server 3.0 allows remote attackers to cause a denial of service application crash or CPU consumption via a long USER command...

Quick 'n EasY 3.0 FTP Server - Remote Denial of Service

/ Quick'n Easy FTP Server 3.0 pro and lite Remote D.o.S Exploit by Kozan Based on matiteman's code in perl Application: Quick 'n Easy FTP Server 3.0 pro and lite Vendor: www.pablosoftwaresolutions.com Discovered by: matiteman Exploit Coded by: Kozan Credits to ATmaCA, matiteman Web:...

Quick n EasY 3.0 FTP Server - Remote Denial of Service

Quick n EasY 3.0 FTP Server - Remote Denial of Service / Quick'n Easy FTP Server 3.0 pro and lite Remote D.o.S Exploit by Kozan Based on matiteman's code in perl Application: Quick 'n Easy FTP Server 3.0 pro and lite Vendor: www.pablosoftwaresolutions.com Discovered by: matiteman Exploit Coded by...

[SA16264] Easy PX 41 CMS Cross-Site Scripting and Information Disclosure

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Cisco IOS Easy VPN Server fails to properly process ISAKMP profile attributes

Overview Cisco IOS Easy VPN Server fails to properly process ISAKMP profile attributes. This may allow a remote, unauthenticated attacker to access the private network. Description Easy VPN Server Cisco IOS Easy VPN Server allows an IOS device to function as a VPN concentrator, providing...

CVE-2005-1550

CVE-2005-1550 affects Easy Message Board ( Perl-based bulletin board). The OpenVAS details describe an input validation flaw in the remote script, enabling a remote attacker to perform directory traversal or execute arbitrary commands on the host with the web server privileges. The issue is tied ...

CVE-2005-1550

easymsgb.pl in Easy Message Board allows remote attackers to execute arbitrary commands via shell metacharacters in the print parameter...

CVE-2005-1549

Directory traversal vulnerability in easymsgb.pl in Easy Message Board allows remote attackers to read arbitrary files via a .. dot dot in the print parameter...

CVE-2005-1550

easymsgb.pl in Easy Message Board allows remote attackers to execute arbitrary commands via shell metacharacters in the print parameter...

CVE-2005-1549

The OpenVAS entries confirm a concrete vulnerability in Easy Message Board (Easy Message Board, Perl-based). The flaw resides in easymsgb.pl where input validation is inadequate, enabling directory traversal via the print parameter and potentially allowing remote command execution on the web serv...

CVE-2005-1549

Directory traversal vulnerability in easymsgb.pl in Easy Message Board allows remote attackers to read arbitrary files via a .. dot dot in the print parameter...

CVE-2005-1550: Undefined Security Weakness

easymsgb.pl in Easy Message Board allows remote attackers to execute arbitrary commands via shell metacharacters in the print parameter...

CVE-2005-1549: Undefined Security Weakness

Directory traversal vulnerability in easymsgb.pl in Easy Message Board allows remote attackers to read arbitrary files via a .. dot dot in the print parameter...

CVE-2003-1146

The CVE describes a cross-site scripting (XSS) vulnerability in John Beatty Easy PHP Photo Album 1.0, exploitable via the dir parameter to inject arbitrary script/HTML. Multiple sources (NVD, Red Hat, CVE List) confirm the issue and its description. No explicit exploitation details, vectors beyon...

CVE-2003-1146: Undefined Security Weakness

Cross-site scripting XSS vulnerability in John Beatty Easy PHP Photo Album 1.0 allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

[Full-disclosure] Easy Message Board Directory Traversal and Remote Command

============================================================ ============================================================ Title: Easy Message Board Directory Traversal and Remote Command Execution Vulnerability discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 08/05/2005...