CVE-2006-2697

CVE-2006-2697 concerns SQL injection vulnerabilities in Easy-Content Forums 1.0. The affected components are the web scripts and parameters: startletter in userview.asp and forumname in topics.asp, where user-supplied input can be used to alter SQL queries. This is documented in the NVD descripti...

CVE-2006-2697: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 startletter parameter in userview.asp and the 2 forumname parameter in topics.asp...

CVE-2006-2696: Undefined Security Weakness

Cross-site scripting XSS vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 startletter parameter in userview.asp and the 2 catid parameter in topics.asp...

Easy-Content Forums 1.0 Multiple [SQL/XSS] Vulnerabilities

ENGLISH Title : Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities Dork : "Copyright 2004 easy-content forums" Author : ajann Exploit; SQL INJECTON-------------------------------------------------------- http://target/path/userview.asp?startletter=SQL TEXT...

Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities

Exploit for unknown platform in category web applications...

Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities

No description provided by source. ENGLISH Title : Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities Dork : "Copyright 2004 easy-content forums" Author : ajann Exploit; SQL INJECT.ON-------------------------------------------------------- http://target/path/userview.asp?startletter=SQL TEX...

Easy-Content Forums 1.0 - Multiple SQL Injection Cross-Site Scripting Vulnerabilities

Easy-Content Forums 1.0 - Multiple SQL Injection Cross-Site Scripting Vulnerabilities ENGLISH Title : Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities Dork : "Copyright 2004 easy-content forums" Author : ajann Exploit; SQL INJECT.ON--------------------------------------------------------...

Easy-Content Forums 1.0 - Multiple SQL Injection / Cross-Site Scripting Vulnerabilities

ENGLISH Title : Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities Dork : "Copyright 2004 easy-content forums" Author : ajann Exploit; SQL INJECT.ON-------------------------------------------------------- http://target/path/userview.asp?startletter=SQL TEXT...

PHP Easy Galerie Index.PHP Remote File Include Vulnerability

Vendor: Power-Place www.power-place.net PHP Easy Galerie 1.1 ------------------------------------------------- Author:Craziest Contact: craziestatgmaildotcom Vuln discovered by BrEakerS -------------------------------------------------- Method:An attacker can exploit this issue to include an...

CVE-2006-2526

The CVE-2006-2526 issue affects PHP Easy Galerie 1.1, via a PHP remote file inclusion in index.php where includepath can be manipulated to execute arbitrary PHP code. The NVD entry assigns a MEDIUM risk (base score 6.4) with network access and no authentication, and the impact is partial confiden...

CVE-2006-2526: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in PHP Easy Galerie 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...

Buffer overflow

Buffer overflow in XM Easy Personal FTP Server 4.3 and earlier allows remote attackers to execute arbitrary code, probably via a USER command with a long username...

Buffer overflow

Buffer overflow in XM Easy Personal FTP Server 4.2 and 5.0.1 allows remote authenticated users to cause a denial of service via a long argument to the PORT command...

CVE-2006-2226

Buffer overflow in XM Easy Personal FTP Server 4.2 and 5.0.1 allows remote authenticated users to cause a denial of service via a long argument to the PORT command...

CVE-2006-2225

Buffer overflow in XM Easy Personal FTP Server 4.3 and earlier allows remote attackers to execute arbitrary code, probably via a USER command with a long username...

CVE-2006-2226

The connected records indicate a related vulnerability: CVE-2006-6750 describes a format string vulnerability in XM Easy Personal FTP Server 5.0.1 that allows remote attackers to cause a denial of service (application crash) via format string specifiers in a long PORT command. This issue is noted...

CVE-2006-2225

Buffer overflow in XM Easy Personal FTP Server 4.3 and earlier allows remote attackers to execute arbitrary code, probably via a USER command with a long username...

CVE-2006-2226

Buffer overflow in XM Easy Personal FTP Server 4.2 and 5.0.1 allows remote authenticated users to cause a denial of service via a long argument to the PORT command...

CVE-2006-2225

CVE-2006-2225 affects XM Easy Personal FTP Server 4.3 and earlier. It describes a buffer overflow exploitable by a long USER command that allows remote code execution; multiple sources corroborate this vector (USER command) and impact. There is no explicit remediation or patch details in the prov...

[REWTERZ-20060503] XM Easy Personal FTP Server Remote Buffer Overflow Vulnerability

REWTERZ-20060503 - XM Easy Personal FTP Server Remote Buffer Overflow Vulnerability Release Date: May 3, 2006 Severity: High Remote Code Execution Vendor: Dxmsoft Software Affected: XM Easy Personal FTP Server v4.3 and before Operating Systems Affected: Windows NT 4.0 Windows 98 / ME Windows 2000...