CVE-2006-5728

XM Easy Personal FTP Server 5.2.1 and earlier is affected by a denial-of-service vulnerability triggered by a long argument to the NLST command (potentially with -al flags). The issue requires an authenticated remote user to cause the DoS, and the description does not provide explicit exploit det...

XM Easy Personal FTP Server DoS

Buffer overflow on oversized NLST -al FTP command argument...

[Full-disclosure] [x0n3-h4ck.org] Bug on Drake CMS v0.2

-=--------------------ADVISORY-------------------=- Drake CMS V. 0.2 Author: CorryL x0n3-h4ck.org -=----------------------------------------------------=- -=+ Application: Drake CMS -=+ Version: 0.2 -=+ Vendor's URL: https://sourceforge.net/projects/drakecms/ -=+ Platform: WindowsLinuxUnix -=+ Bu...

CVE-2006-5713

Cross-site scripting XSS vulnerability in Easy File Sharing EFS Web Server 4.0 allows remote attackers to inject arbitrary web script or HTML via the 1 author, 2 content, or 3 title parameters when posting a forum thread. NOTE: the provenance of this information is unknown; the details are obtain...

CVE-2006-5714

Easy File Sharing EFS Web Server 4.0, when running on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending "::$DATA" to the end of a HTTP GET request, which accesses the alternate data stream...

CVE-2006-5715

Easy File Sharing EFS Easy Address Book 1.2, when run on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending "::$DATA" to the end of an HTTP GET request, which accesses the alternate data stream...

CVE-2006-5714

Easy File Sharing EFS Web Server 4.0, when running on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending "::$DATA" to the end of a HTTP GET request, which accesses the alternate data stream...

CVE-2006-5715

CVE-2006-5715 affects Easy File Sharing (EFS) Easy Address Book 1.2 when run on NTFS. The vulnerability allows remote attackers to read arbitrary files under the web root by appending the ADS suffix ::$DATA to an HTTP GET, accessing an alternate data stream. The description confirms the root caus...

CVE-2006-5713

CVE-2006-5713 describes an XSS vulnerability in Easy File Sharing (EFS) Web Server 4.0. The issue allows remote attackers to inject arbitrary web script or HTML through the forum-thread posting parameters: author, content, or title. The metadata indicates cross-site scripting with no confidential...

XM Easy Personal FTP Server 5.2.1 - Remote Denial of Service

XM Easy Personal FTP Server 5.2.1 - Remote Denial of Service !/usr/bin/perl Title: XM Easy Personal FTP Server new PeerAddr = $ARGV0, PeerPort = $remotePort, Proto = "TCP" bannerExploit; print " + Establishing connection at " . $ARGV0 . ":" . $remotePort . "\n"; print $socket "USER "...

XM Easy Personal FTP Server <= 5.2.1 Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ===================================================================== XM Easy Personal FTP Server new PeerAddr = $ARGV0, PeerPort = $remotePort, Proto = "TCP" bannerExploit; print " + Establishing connection at " . $ARGV0 . ":" . $remotePort...

XM Easy Personal FTP Server 5.2.1 - Remote Denial of Service

!/usr/bin/perl Title: XM Easy Personal FTP Server new PeerAddr = $ARGV0, PeerPort = $remotePort, Proto = "TCP" bannerExploit; print " + Establishing connection at " . $ARGV0 . ":" . $remotePort . "\n"; print $socket "USER " . $remoteUsername . "\r\n"; print " FTP Username: '" . $remoteUsername...

CVE-2006-5662

SQL injection vulnerability in easy notesManager eNM 0.0.1 allows remote attackers to execute arbitrary SQL commands via 1 the username parameter in login.php and 2 a search on the "search page."...

CVE-2006-5662

SQL injection vulnerability in easy notesManager eNM 0.0.1 allows remote attackers to execute arbitrary SQL commands via 1 the username parameter in login.php and 2 a search on the "search page."...

CVE-2006-5662

CVE-2006-5662 describes an SQL injection in easy notesManager (eNM) 0.0.1. The vulnerability allows remote attackers to execute arbitrary SQL via the username parameter in login.php and via a search on the search page. The available records do not specify affected versions beyond 0.0.1, nor provi...

EFS Easy Address Book Web Server <= 1.2 Remote File Stream Exploit

Exploit for unknown platform in category remote exploits ================================================================== EFS Easy Address Book Web Server GLinares.code at gmail dot com This tool demonstrates EFS' Easy Address Book Web Server Vulnerability to Alternative Data Stream GET request...

EFS Easy Address Book Web Server 1.2 - Remote File Stream

EFS Easy Address Book Web Server 1.2 - Remote File Stream / ========================================================================== 0-day Alternative File Stream Exploit for EFS Easy Address Book Web Server =========================================================================== EFS' Easy...

Easy Web Portal 2.1.2 - Multiple Remote File Inclusions

Easy Web Portal 2.1.2 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/20825/info Easy Web Portal is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to...

easy notes manager sql injection and authentication bypass

easy notes manager eNM version 0.0.1, available at http://217.172.179.216/evandor/html/index.php?id=103 is affected by multiple sql injection vulnerability due to a missing check of the user supplied input. An attacker can bypass the authentication procedure and get a full dump of the database...

Easy File Sharing Web Server 4 Remote Information Stealer Exploit

No description provided by source. / =================================================================== 0-day Alternative File Stream Exploit for Easy File Share Server 4 =================================================================== Exploit allows malicious users to grab files from the...