CVE-2006-6933

Easy Chat Server 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download certain files via direct requests to files such as 1 ServerKey.pem and 2 AcceptIP.txt. NOTE: The provenance of this information is unknown; the details...

CVE-2006-6933

Easy Chat Server 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download certain files via direct requests to files such as 1 ServerKey.pem and 2 AcceptIP.txt. NOTE: The provenance of this information is unknown; the details...

CVE-2007-0252

Technical details (affected product/version, vectors, exploitability) are not provided in the supplied documents. Monitor for updates; no public details are available here.

CVE-2006-6933

Easy Chat Server 2.1 stores sensitive files under the web root with insufficient access control, enabling remote download of (at least) ServerKey.pem and AcceptIP.txt via direct requests. Root cause: improper access restrictions exposing sensitive files. No explicit exploitation details are provi...

ebp2x-rfi.txt

+-------------------------------------------------------------------- + + Easy Banner Pro Version 2. = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Easy Banner Pro Version + Venedor ...........: http://www.phpwebscripts.com...

Remote file inclusion

PHP remote file inclusion vulnerability in info.php in Easy Banner Pro 2.8 allows remote attackers to execute arbitrary PHP code via a URL in the sphppath parameter...

CVE-2007-0178

PHP remote file inclusion vulnerability in info.php in Easy Banner Pro 2.8 allows remote attackers to execute arbitrary PHP code via a URL in the sphppath parameter...

CVE-2007-0178

PHP remote file inclusion vulnerability in info.php in Easy Banner Pro 2.8 allows remote attackers to execute arbitrary PHP code via a URL in the sphppath parameter...

CVE-2007-0178

CVE-2007-0178 describes a PHP remote file inclusion vulnerability in Easy Banner Pro 2.8’s info.php, exploitable via the s[phppath] parameter to execute arbitrary PHP code on the server. The NVD entry lists a CVSSv2 base score of 7.5 (HIGH) with network attack vector and low complexity, resulting...

Easy Banner Pro Version 2.8 <= Remote File Inclusion

+-------------------------------------------------------------------- + + Easy Banner Pro Version 2. = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Easy Banner Pro Version + Venedor ...........: http://www.phpwebscripts.com...

Easy Banner Pro 2.8 - info.php Remote File Inclusion

Easy Banner Pro 2.8 - info.php Remote File Inclusion source: https://www.securityfocus.com/bid/21967/info Easy Banner Pro is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the...

Easy Banner Pro 2.8 - 'info.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/21967/info Easy Banner Pro is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are...

Easy Blog Doc_Directory远程文件包含漏洞

Easy Blog是一款基于PHP的网络日记程序。 Easy Blog不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于多个脚本对用户提交的'DocDirectory'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 OpenDock Easy Blog 1.4 目前没有详细解决方案提供，请关注以下链接： http://web.opendock.net/index.php/ln/it/idp/40.html...

EasyNews PRO News Publishing 4.0 - Password Disclosure

EasyNews PRO News Publishing 4.0 - Password Disclosure = EasyNews PRO News Publishing 4.0 Remote Password Disclosure Vulnerability Affected Software: Easy News 4.0 PRO = Risk: Critical = Download: http://www.stphp.com/scripts/EasyNewsPRO40.zip = Bugfounder: bd0rk = Contact: bd0rkathackermail.com ...

CVE-2006-6751

Format string vulnerability in XM Easy Personal FTP Server 5.2.1 allows remote attackers to cause a denial of service application crash via format string specifiers in the USER command or certain other available or nonexistent commands. NOTE: It was later reported that 5.3.0 is also vulnerable...

CVE-2006-6751

CVE-2006-6751 : Format-string vulnerability in XM Easy Personal FTP Server (versions 5.2.1 and 5.3.0) allows remote attackers to trigger a crash via format specifiers in the USER command or other commands, causing a denial of service and partial availability impact. No remediation details are pro...

CVE-2006-6751

Format string vulnerability in XM Easy Personal FTP Server 5.2.1 allows remote attackers to cause a denial of service application crash via format string specifiers in the USER command or certain other available or nonexistent commands. NOTE: It was later reported that 5.3.0 is also vulnerable...

PHP Web Scripts Easy Banner Functions.PHP远程文件包含漏洞

PHP Web Scripts Easy Banner是一款基于PHP的web应用程序。 PHP Web Scripts Easy Banner不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Functions.PHP'脚本对用户提交的'sphppath'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 PHP Web Scripts Easy Banner Free 目前没有详细解决方案提供，请关注以下链接：...

CVE-2006-6750

XM Easy Personal FTP Server is affected by a format string vulnerability in the PORT handling which can cause a denial of service (crash). The issue is documented for version 5.0.1, with related notes mentioning 5.3.0 in consolidated records. Root cause is improper handling of format specifiers i...

CVE-2006-6750

Format string vulnerability in XM Easy Personal FTP Server 5.0.1 allows remote attackers to cause a denial of service application crash via format string specifiers in a long PORT command. NOTE: this issue might be related to CVE-2006-2226...