CVE-2006-0877

Cross-site scripting vulnerability in Easy Forum 2.5 allows remote attackers to inject arbitrary web script or HTML via the image variable...

CVE-2006-0877

The CVE-2006-0877 entry refers to a Cross-Site Scripting vulnerability in Easy Forum 2.5 allowing remote injection of arbitrary script via the image variable. Connected sources confirm affected software (Easy Forum 2.5) and vulnerable script join.php with unsanitized image data; exploit code is a...

CVE-2006-0507

Multiple cross-site scripting XSS vulnerabilities in Easy CMS allow remote attackers to inject arbitrary web script or HTML via 1 unknown attack vectors in the administrative interface and 2 input fields of the contact form...

CVE-2006-0508

Easy CMS stores the images directory under the web document root with insufficient access control and browsing enabled, which allows remote attackers to list and possibly read images that are stored in that directory...

Improper access control

Easy CMS stores the images directory under the web document root with insufficient access control and browsing enabled, which allows remote attackers to list and possibly read images that are stored in that directory...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Easy CMS allow remote attackers to inject arbitrary web script or HTML via 1 unknown attack vectors in the administrative interface and 2 input fields of the contact form...

CVE-2006-0508

CVE-2006-0508 concerns Easy CMS, where the images directory is stored under the web document root with insufficient access control and enabled directory listing. The underlying issue is a misconfiguration that allows remote attackers to enumerate and potentially read images stored in that directo...

CVE-2006-0507

Multiple cross-site scripting XSS vulnerabilities in Easy CMS allow remote attackers to inject arbitrary web script or HTML via 1 unknown attack vectors in the administrative interface and 2 input fields of the contact form...

CVE-2006-0507

CVE-2006-0507 corresponds to multiple cross-site scripting (XSS) vulnerabilities in Easy CMS. The advisory indicates remote attackers can inject arbitrary web script or HTML through (1) undisclosed vectors in the administrative interface and (2) input fields of the contact form. The NVD metrics a...

CVE-2006-0508

Easy CMS stores the images directory under the web document root with insufficient access control and browsing enabled, which allows remote attackers to list and possibly read images that are stored in that directory...

VPNcheckpoint.txt

Situation: Employees should be allowed to access your company network from remote by VPN. You want to make sure, that only the hardware of your own company is allowed to access the network on the VPN. This because your company hardware uses a hardened operating system personal firewall,...

CVE-2005-4032

Cross-site scripting XSS vulnerability in search.cgi in Easy Search System 1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2005-4032

CVE-2005-4032 describes a cross-site scripting (XSS) vulnerability in search.cgi of Easy Search System 1.1 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML through the q parameter. The available connected documents confirm the existence of the vulnerability and...

CVE-2005-4032

Cross-site scripting XSS vulnerability in search.cgi in Easy Search System 1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter...

Easy Search System 1.1 - search.cgi Cross-Site Scripting

Easy Search System 1.1 - search.cgi Cross-Site Scripting source: https://www.securityfocus.com/bid/15705/info Easy Search System is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in t...

CVE-2005-3698

PHP Easy Download allows remote attackers to bypass authentication via edit.php...

CVE-2005-3698

PHP Easy Download (CVE-2005-3698) allows remote attackers to bypass authentication via edit.php. The connected sources (NVD, Red Hat advisory, CVE List) confirm an access-control weakness at the edit.php entry point, enabling unauthorized access. No specific exploitation details, affected version...

CVE-2005-3698

PHP Easy Download allows remote attackers to bypass authentication via edit.php...

Easy Message Board Command Execution

The remote host is running Easy Message Board, a bulletin board system written in perl. The remote version of this script contains an input validation flaw. SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2004-2465

CVE-2004-2465 describes an XSS vulnerability in Easy Chat Server 1.2, specifically in the chat.ghp component, where the username parameter can be exploited to inject arbitrary web script or HTML. The NVD entry notes a network-exposed vulnerability with no confidentiality impact, partial integrity...