CVE-2006-1159

Format string vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in the query string argument in an HTTP GET request...

Path traversal

Absolute path traversal vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote registered users to execute arbitrary code by uploading a malicious file to the Windows startup folder...

CVE-2006-1161

Absolute path traversal vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote registered users to execute arbitrary code by uploading a malicious file to the Windows startup folder...

Cross site scripting

Cross-site scripting XSS vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote attackers to inject arbitrary web script or HTML via the Description field in creating a folder or uploading a file...

Format string

Format string vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in the query string argument in an HTTP GET request...

CVE-2006-1161

CVE-2006-1161 affects Easy File Sharing Web Server (EFS) Web Server 3.2. It describes an absolute path traversal that allows remote registered users to upload a malicious file to the Windows startup folder and thereby execute arbitrary code. The provided documents consistently identify the vulner...

CVE-2006-1160

Cross-site scripting XSS vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote attackers to inject arbitrary web script or HTML via the Description field in creating a folder or uploading a file...

CVE-2006-1160

CVE-2006-1160 affects Easy File Sharing Web Server (EFS) Web Server 3.2. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the Description field when creating a folder or uploading a file. The provided sources specify th...

Easy File Sharing Web Server 3.2 - Format String Denial of Service

Easy File Sharing Web Server 3.2 - Format String Denial of Service source: https://www.securityfocus.com/bid/17046/info Easy File Sharing Web Server is prone to multiple input-validation vulnerabilities. The application fails to properly sanitize user-supplied input before using it in dynamically...

EV0085.txt

New eVuln Advisory: Easy Forum XSS Vulnerability http://evuln.com/vulns/85/summary.html --------------------Summary---------------- eVuln ID: EV0085 CVE: CVE-2006-0877 Software: Easy Forum Sowtware's Web Site: http://hot-things.net/?q=eforum Versions: 2.5 Critical Level: Harmless Type: Cross-Site...

[eVuln] Easy Forum XSS Vulnerability

New eVuln Advisory: Easy Forum XSS Vulnerability http://evuln.com/vulns/85/summary.html --------------------Summary---------------- eVuln ID: EV0085 CVE: CVE-2006-0877 Software: Easy Forum Sowtware's Web Site: http://hot-things.net/?q=eforum Versions: 2.5 Critical Level: Harmless Type: Cross-Site...

XM Easy Personal FTP Server 1.0 (Port) Remote Overflow PoC

No description provided by source. !/usr/bin/perl ---------------------------------------------------- Name : XM Easy Personal FTP Server Version : 4.2 ---------------------------------------------------- Type : dos / remote Descritpion : buffer overflow for huge PORT value...

XM Easy Personal FTP Server 1.0 - Port Remote Overflow (PoC)

XM Easy Personal FTP Server 1.0 - Port Remote Overflow PoC !/usr/bin/perl ---------------------------------------------------- Name : XM Easy Personal FTP Server Version : 4.2 ---------------------------------------------------- Type : dos / remote Descritpion : buffer overflow for huge PORT valu...

XM Easy Personal FTP Server 1.0 (Port) Remote Overflow PoC

Exploit for unknown platform in category dos / poc ========================================================== XM Easy Personal FTP Server 1.0 Port Remote Overflow PoC ========================================================== !/usr/bin/perl ---------------------------------------------------- Nam...

Easy Forum 2.5 - New User Image File HTML Injection

source: https://www.securityfocus.com/bid/16958/info Easy Forum is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would be...

Cross site scripting

Cross-site scripting vulnerability in Easy Forum 2.5 allows remote attackers to inject arbitrary web script or HTML via the image variable...

CVE-2006-0877

Cross-site scripting vulnerability in Easy Forum 2.5 allows remote attackers to inject arbitrary web script or HTML via the image variable...

CVE-2006-0877

The CVE-2006-0877 entry refers to a Cross-Site Scripting vulnerability in Easy Forum 2.5 allowing remote injection of arbitrary script via the image variable. Connected sources confirm affected software (Easy Forum 2.5) and vulnerable script join.php with unsanitized image data; exploit code is a...

CVE-2006-0877

Cross-site scripting vulnerability in Easy Forum 2.5 allows remote attackers to inject arbitrary web script or HTML via the image variable...

Improper access control

Easy CMS stores the images directory under the web document root with insufficient access control and browsing enabled, which allows remote attackers to list and possibly read images that are stored in that directory...