CVE-2005-4851

eZ publish 3.4.4 through 3.7 before 20050722 applies certain permissions on the node level, which allows remote authenticated users to bypass the original permissions on embedded objects in XML fields and read these objects...

CVE-2005-4854

eZ publish 3.5 through 3.7 before 20050830 does not use a folder's read permissions to restrict notifications, which allows remote authenticated users to obtain sensitive information about changes to content in arbitrary folders...

CVE-2005-4855

Unrestricted file upload vulnerability in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7 before 3.7.0rc2, and 3.8 before 20050922 does not restrict Image datatype uploads to image content types, which allows remote authenticated users to upload certain types of files, as demonstrated by .js...

CVE-2005-4853

The default configuration of the forum package in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7 before 3.7.0rc2, and 3.8 before 20050818 does not restrict edit permissions to a posting's owner, which allows remote authenticated users to edit arbitrary postings...

CVE-2005-4856

The admin interface in eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051110 does not properly handle authorization errors, which allows remote attackers to obtain sensitive information and see the admin pagelayout and associated templates via a request with 1...

Watchfire AppScan QA 5.0.x Remote Code Execution Exploit PoC

Exploit for unknown platform in category remote exploits ============================================================ Watchfire AppScan QA 5.0.x Remote Code Execution Exploit PoC ============================================================ Watchfire AppScan QA PoC - Coded by Mariano Nu?ez Di Croc...

CVE-2005-3845

SQL injection vulnerability in invoices.php in EZ Invoice Inc 2.0 allows remote attackers to execute arbitrary SQL commands via the i parameter. NOTE: the vendor has stated "EZ Invoice, Inc has a patah available. Please email [email protected] and EZI will email you the patch to fix this...

CVE-2005-3845

CVE-2005-3845 describes a SQL injection in invoices.php for EZ Invoice Inc 2.0, exploitable via the i parameter to execute arbitrary SQL commands remotely. The affected component is invoices.php within EZ Invoice Inc 2.0. The vendor notes a patch is available and will be emailed to customers upon...

CVE-2005-3845

SQL injection vulnerability in invoices.php in EZ Invoice Inc 2.0 allows remote attackers to execute arbitrary SQL commands via the i parameter. NOTE: the vendor has stated "EZ Invoice, Inc has a patah available. Please email [email protected] and EZI will email you the patch to fix this...

EZ Invoice Inc™ v 2.0 SQL inj.

EZ Invoice Inc™ v 2.0 SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/ez-invoice-inc-v-20-sql-inj.html Vendor:http://www.ezinvoiceinc.com/ affected version:v 2.0 and prior Product description: This software is the easiest way create and...

CVE-2005-3845: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in invoices.php in EZ Invoice Inc 2.0 allows remote attackers to execute arbitrary SQL commands via the i parameter. NOTE: the vendor has stated "EZ Invoice, Inc has a patah available. Please email [email protected] and EZI will email you the patch to fix this...

eZ/eZphotoshare Denial of Service

The remote host runs eZ/eZphotoshare, a service for sharing and exchanging digital photos. This version is vulnerable to a denial of service attack. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respecti...

eZ Publish <= 2.2.7 Multiple XSS Vulnerabilities

eZ Publish is prone to multiple cross-site scripting XSS vulnerabiliites. SPDX-FileCopyrightText: 2003 k-otik.com Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2003-0887

The CVE-2003-0887 entry concerns ez-ipupdate (versions 3.0.11b7 and earlier) that creates insecure temporary cache files, enabling a local user to perform unauthorized operations via a symlink attack on the ez-ipupdate.cache file. The linked SUSE/other entries reiterate the same flaw without prov...

CVE-2003-0887

ez-ipupdate 3.0.11b7 and earlier creates insecure temporary cache files, which allows local users to conduct unauthorized operations via a symlink attack on the ez-ipupdate.cache file...

CVE-2003-0887: Undefined Security Weakness

ez-ipupdate 3.0.11b7 and earlier creates insecure temporary cache files, which allows local users to conduct unauthorized operations via a symlink attack on the ez-ipupdate.cache file...

CVE-2002-1818

The CVE-2002-1818 entry concerns ezhttpbench.php in eZ httpbench 1.1, where an attacker can remotely read arbitrary files by supplying a full pathname in the AnalyseSite parameter. Affected software: eZ httpbench 1.1 (component: ezhttpbench.php). Underlying cause: input handling flaw that allows ...

CVE-2002-1818: Undefined Security Weakness

ezhttpbench.php in eZ httpbench 1.1 allows remote attackers to read arbitrary files via a full pathname in the AnalyseSite parameter...

CVE-2004-0980

Format string vulnerability in ez-ipupdate.c for ez-ipupdate 3.0.10 through 3.0.11b8, when running in daemon mode with certain service types in use, allows remote servers to execute arbitrary code...

DEBIAN-CVE-2004-0980

Format string vulnerability in ez-ipupdate.c for ez-ipupdate 3.0.10 through 3.0.11b8, when running in daemon mode with certain service types in use, allows remote servers to execute arbitrary code...