[SCSA-016] Multiple vulnerabilities in Ez publish

====================================================================== Security Corporation Security Advisory SCSA-016 Multiple vulnerabilities in Ez publish ====================================================================== PROGRAM: Ez publish HOMEPAGE: http://www.ez.no VULNERABLE VERSIONS:...

eZ Publish settings/site.ini Configuration Disclosure

eZ Publish, a content management system, is installed on the remote host. A remote attacker can retrieve the file 'settings/site.ini', which contains information such as database name, username, and password. This information could be used to mount further attacks. This version of eZ Publish also...

EZ Publish 2.2.7/3.0 - Multiple Full Path Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/7349/info Several path disclosure vulnerabilities have been reported for eZ Publish. An attacker can exploit this vulnerability by making a HTTP request for any of the affected pages. This may result in a condition where path information is returned to th...

EZ Publish 2.2.7/3.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/7348/info Several cross site scripting vulnerabilities have been reported for eZ Publish. These vulnerabilities are due to insufficient sanitization of user-supplied data submitted to eZ Publish. Exploitation may allow theft of cookie-based authentication...

EZ Publish 2.2.7/3.0 - site.ini Information Disclosure

source: https://www.securityfocus.com/bid/7347/info eZ Publish has been reported prone to sensitive information disclosure vulnerability. An attacker may make a request for and download the underlying site.ini configuration file. The file contains eZ Publish administration credentials stored in...

SCSA014.txt

====================================================================== Security Corporation Security Advisory SCSA-014 Remote Denial of Service Vulnerability in EZ Server ====================================================================== PROGRAM: EZ Server HOMEPAGE: http://www.html-helper.com...

EZ Server 1.0 - Long Argument Local Denial of Service

source: https://www.securityfocus.com/bid/7243/info It has been reported that the EZ Server software does not sufficiently handle strings of excessive length in some circumstances. Because of this, a remote attacker may be able to deny service to legitimate users of the system. ls AX where X is a...

EZ Server 1.0 - Long Argument Local Denial of Service

EZ Server 1.0 - Long Argument Local Denial of Service source: https://www.securityfocus.com/bid/7243/info It has been reported that the EZ Server software does not sufficiently handle strings of excessive length in some circumstances. Because of this, a remote attacker may be able to deny service...

[SCSA-014] Remote Denial of Service Vulnerability in EZ Server

====================================================================== Security Corporation Security Advisory SCSA-014 Remote Denial of Service Vulnerability in EZ Server ====================================================================== PROGRAM: EZ Server HOMEPAGE: http://www.html-helper.com...

CVE-2002-1818

ezhttpbench.php in eZ httpbench 1.1 allows remote attackers to read arbitrary files via a full pathname in the AnalyseSite parameter...

benchmark tool for HTTP pages.

ezhttpbench.php eZ httpbench version 1.1http://developer.ez.no - benchmark tool for HTTP pages. A security vulnerability in the product allows remote attackers to download any file on the local system that the eZ httpbench has read access to. Vulnerable systems: eZ httpbench version 1.1 eZ...