CVE-2006-5713

CVE-2006-5713 describes an XSS vulnerability in Easy File Sharing (EFS) Web Server 4.0. The issue allows remote attackers to inject arbitrary web script or HTML through the forum-thread posting parameters: author, content, or title. The metadata indicates cross-site scripting with no confidential...

CVE-2006-5713: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Easy File Sharing EFS Web Server 4.0 allows remote attackers to inject arbitrary web script or HTML via the 1 author, 2 content, or 3 title parameters when posting a forum thread. NOTE: the provenance of this information is unknown; the details are obtain...

CVE-2006-5715: Undefined Security Weakness

Easy File Sharing EFS Easy Address Book 1.2, when run on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending "::$DATA" to the end of an HTTP GET request, which accesses the alternate data stream...

CVE-2006-5714: Undefined Security Weakness

Easy File Sharing EFS Web Server 4.0, when running on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending "::$DATA" to the end of a HTTP GET request, which accesses the alternate data stream...

Apple Mac OS X多个安全漏洞

Apple Mac OS X是苹果家族机器所使用的操作系统。 最新的Mac OS X更新修复了多个漏洞，具体如下： CVE-2006-1472 AFP Server中的漏洞允许在搜索结果中包含执行搜索用户无权访问的文件和文件夹。如果文件名本身就是敏感信息的话，就可能导致信息泄露；如果权限允许的话，攻击者还可以访问文件内容。 CVE-2006-1473 已认证用户可以触发AFP Server中的整数溢出漏洞，导致拒绝服务或以系统权限执行任意代码。AFP Server在Mac OS X中不是默认启用的。 CVE-2006-3495 在Mac OS X Server上，AFP...

Easy File Sharing FTP Server PASS命令远程缓冲区溢出漏洞

Easy File Sharing FTP Server是一个简单易用功能强大的FTP Server软件。 Easy File Sharing FTP Server在处理带有超长参数的PASS命令时存在栈溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 如果远程攻击者提供了超过2571个字节的超长参数的话就会触发这个漏洞，导致执行任意指令。 EFS Software Easy File Sharing FTP Server 2.0 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Easy File Sharing Web Server 4 Remote Information Stealer Exploit

No description provided by source. / =================================================================== 0-day Alternative File Stream Exploit for Easy File Share Server 4 =================================================================== Exploit allows malicious users to grab files from the...

Easy File Sharing Web Server 4 - Remote Information Stealer

/ =================================================================== 0-day Alternative File Stream Exploit for Easy File Share Server 4 =================================================================== Exploit allows malicious users to grab files from the server without being authenticated...

Easy File Sharing Web Server 4 Remote Information Stealer Exploit

Exploit for unknown platform in category remote exploits ================================================================= Easy File Sharing Web Server 4 Remote Information Stealer Exploit ================================================================= /...

MiniHttpServer Web Forum & File Sharing Server 4.0 Add User Exploit

No description provided by source. /================================================================ MiniHTTPServer.NET 's Web Forum & File Sharing Server Power Pack 4 latest version available for sale on their website http://www.minihttpserver.net/bbs/index.php has multiple vulnerabilities with...

MiniHTTPServer Web Forum File Sharing Server 4.0 - Add User

MiniHTTPServer Web Forum File Sharing Server 4.0 - Add User /================================================================ MiniHTTPServer.NET 's Web Forum & File Sharing Server Power Pack 4 latest version available for sale on their website http://www.minihttpserver.net/bbs/index.php has...

MiniHttpServer Web Forum & File Sharing Server 4.0 Add User Exploit

Exploit for unknown platform in category remote exploits =================================================================== MiniHttpServer Web Forum & File Sharing Server 4.0 Add User Exploit ===================================================================...

MiniHTTPServer Web Forum & File Sharing Server 4.0 - Add User

/================================================================ MiniHTTPServer.NET 's Web Forum & File Sharing Server Power Pack 4 latest version available for sale on their website http://www.minihttpserver.net/bbs/index.php has multiple vulnerabilities with their join.asp page a malicious...

Easy File Sharing FTP Server 2.0 (PASS) Remote Exploit (PoC)

No description provided by source. !/usr/bin/python Easy File Sharing FTP Server 2.0 PASS 0day PoC exploit Proof of Concept: execute calc.exe Bug found by h07 [email protected] Tested on XP SP2 polish Date: 28.07.2006 BUFFPASS + 0x20+0x2c+NOP 2571+0x41414141+\r\n EIP = 0x41414141 host = "127.0.0.1"...

Easy File Sharing FTP Server 2.0 (PASS) Remote Exploit (PoC)

Exploit for unknown platform in category remote exploits ============================================================ Easy File Sharing FTP Server 2.0 PASS Remote Exploit PoC ============================================================ !/usr/bin/python Easy File Sharing FTP Server 2.0 PASS 0day P...

Easy File Sharing FTP Server buffer overflow

Buffer overflow on oversized USER command...

Easy File Sharing FTP Server 2.0 - PASS Remote

Easy File Sharing FTP Server 2.0 - PASS Remote !/usr/bin/python Easy File Sharing FTP Server 2.0 PASS 0day PoC exploit Proof of Concept: execute calc.exe Bug found by h07 Tested on XP SP2 polish Date: 28.07.2006 BUFFPASS + 0x20+0x2c+NOP 2571+0x41414141+\r\n EIP = 0x41414141 host = "127.0.0.1" por...

Apple Mac OS X AFP server vulnerable to DoS via maliciously crafted AFP request

Overview A vulnerability in the Apple Mac OS X AFP server may allow an attacker to cause a denial-of-service condition on an affected system. Description The AFP Apple Filing Protocol service allows Apple Mac OS clients to access files remotely from a server. Apple's Mac OS X AFP server contains ...

Apple Mac OS X AFP server vulnerable to an integer overflow when file sharing is enabled

Overview A vulnerability in Apple Mac OS X AFP server may allow a remote attacker to execute arbitrary code or cause a denial-of-service condition on an affected system. Description The AFP Apple Filing Protocol service allows Apple Mac OS clients to remotely access files from a server. Apple's M...

Apple Mac OS X AFP server stores reconnect keys in a world-readable file

Overview A vulnerability in Apple Mac OS X AFP server may allow an authenticated local user to access files or folders with the credentials of another user. Description The AFP Apple Filing Protocol service allows Apple Mac OS clients to remotely access files from a server. In Apple's Mac OS X...