CVE-2023-4493

Stored Cross-Site Scripting in Easy Address Book Web Server 1.6 version, through the usersadmin.ghp file that affects multiple parameters such as firstname, homephone, lastname, lastname, middlename, workaddress, workcity, workcountry, workphone, workstate, workzip. This vulnerability allows a...

Design/Logic Flaw

Vulnerability in Easy Address Book Web Server 1.6 version, affecting the parameters firstname, homephone, lastname, middlename, workaddress, workcity, workcountry, workphone, workstate and workzip of the /addrbook.ghp file, allowing an attacker to inject a JavaScript payload specially designed to...

Buffer overflow

Buffer overflow vulnerability in Easy Address Book Web Server 1.6 version. The exploitation of this vulnerability could allow an attacker to send a very long username string to /searchbook.ghp, asking for the name via a POST request, resulting in arbitrary code execution on the remote machine...

Cross site scripting

Stored Cross-Site Scripting in Easy Address Book Web Server 1.6 version, through the usersadmin.ghp file that affects multiple parameters such as firstname, homephone, lastname, lastname, middlename, workaddress, workcity, workcountry, workphone, workstate, workzip. This vulnerability allows a...

CVE-2023-4493

CVE-2023-4493 describes a stored XSS in Easy Address Book Web Server 1.6 via the users_admin.ghp file, enabling a remote attacker to inject JavaScript that executes when the target page loads, potentially compromising integrity. Affected parameters include firstname, homephone, lastname, middlena...

CVE-2023-4493 Easy Address Book Web Server Stored XSS vulnerability

Stored Cross-Site Scripting in Easy Address Book Web Server 1.6 version, through the usersadmin.ghp file that affects multiple parameters such as firstname, homephone, lastname, lastname, middlename, workaddress, workcity, workcountry, workphone, workstate, workzip. This vulnerability allows a...

CVE-2023-4492 Easy Address Book Web Server XSS vulnerability

Vulnerability in Easy Address Book Web Server 1.6 version, affecting the parameters firstname, homephone, lastname, middlename, workaddress, workcity, workcountry, workphone, workstate and workzip of the /addrbook.ghp file, allowing an attacker to inject a JavaScript payload specially designed to...

CVE-2023-4492 Easy Address Book Web Server XSS vulnerability

Vulnerability in Easy Address Book Web Server 1.6 version, affecting the parameters firstname, homephone, lastname, middlename, workaddress, workcity, workcountry, workphone, workstate and workzip of the /addrbook.ghp file, allowing an attacker to inject a JavaScript payload specially designed to...

CVE-2023-4492

CVE-2023-4492 is an XSS vulnerability in Easy Address Book Web Server 1.6 affecting multiple parameters in the /addrbook.ghp page (firstname, homephone, lastname, middlename, workaddress, workcity, workcountry, workphone, workstate, workzip). The issue allows injecting a JavaScript payload that r...

CVE-2023-4491 Easy Address Book Web Server Buffer overflow vulnerability

Buffer overflow vulnerability in Easy Address Book Web Server 1.6 version. The exploitation of this vulnerability could allow an attacker to send a very long username string to /searchbook.ghp, asking for the name via a POST request, resulting in arbitrary code execution on the remote machine...

CVE-2023-4491

CVE-2023-4491 affects Easy Address Book Web Server 1.6. It is a remote buffer overflow in the /searchbook.ghp API endpoint triggered by sending an overly long username string via POST, leading to arbitrary code execution on the remote host. The CVE is rated 9.8/CRITICAL (CVSS 3.1) with Network at...

CVE-2023-4491 Easy Address Book Web Server Buffer overflow vulnerability

Buffer overflow vulnerability in Easy Address Book Web Server 1.6 version. The exploitation of this vulnerability could allow an attacker to send a very long username string to /searchbook.ghp, asking for the name via a POST request, resulting in arbitrary code execution on the remote machine...

CVE-2023-30738

An improper input validation in UEFI Firmware prior to Firmware update Oct-2023 Release in Galaxy Book, Galaxy Book Pro, Galaxy Book Pro 360 and Galaxy Book Odyssey allows local attacker to execute SMM memory corruption...

CVE-2023-30738

An improper input validation in UEFI Firmware prior to Firmware update Oct-2023 Release in Galaxy Book, Galaxy Book Pro, Galaxy Book Pro 360 and Galaxy Book Odyssey allows local attacker to execute SMM memory corruption...

Input validation

An improper input validation in UEFI Firmware prior to Firmware update Oct-2023 Release in Galaxy Book, Galaxy Book Pro, Galaxy Book Pro 360 and Galaxy Book Odyssey allows local attacker to execute SMM memory corruption...

CVE-2023-30738

The CVE-2023-30738 affects Samsung Galaxy Book family (Galaxy Book, Galaxy Book Pro, Galaxy Book Pro 360, Galaxy Book Odyssey) where UEFI firmware prior to the Oct-2023 Release contains an improper input validation vulnerability. This flaw allows a local attacker to trigger SMM memory corruption ...

CVE-2023-30738

An improper input validation in UEFI Firmware prior to Firmware update Oct-2023 Release in Galaxy Book, Galaxy Book Pro, Galaxy Book Pro 360 and Galaxy Book Odyssey allows local attacker to execute SMM memory corruption...

PT-2023-29316 · Unknown · Easy Address Book Web Server

Name of the Vulnerable Software and Affected Versions: Easy Address Book Web Server version 1.6 Description: The issue is a buffer overflow vulnerability that could allow an attacker to send a very long username string to the "/searchbook.ghp" API endpoint via a POST request, resulting in arbitra...

Easy Address Book Web Server Cross-Site Scripting Vulnerability

Easy Address Book Web Server is a software. A cross-site scripting vulnerability exists in Easy Address Book Web Server version 1.6, which stems from a stored cross-site scripting XSS vulnerability in the usersadmin.ghp file...

PT-2023-29318 · Unknown · Easy Address Book Web Server

Name of the Vulnerable Software and Affected Versions: Easy Address Book Web Server version 1.6 Description: The issue is a Stored Cross-Site Scripting vulnerability that affects multiple parameters such as firstname, homephone, lastname, middlename, workaddress, workcity, workcountry, workphone,...