CVE-2004-2466

chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service server crash via a long username parameter, possibly due to a buffer overflow. NOTE: it was later reported that 2.2 is also affected...

CVE-2004-2465

Cross-site scripting XSS vulnerability in chat.ghp in Easy Chat Server 1.2 allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2004-2466

CVE-2004-2466 affects Easy Chat Server. Public material shows a remote buffer overflow in the username/authentication handling that can crash the server (denial of service). Historical details reference v1.2 and later reports indicate v2.2 is affected; multiple exploit chains exist for Easy Chat ...

CVE-2004-2465

CVE-2004-2465 describes an XSS vulnerability in Easy Chat Server 1.2, specifically in the chat.ghp component, where the username parameter can be exploited to inject arbitrary web script or HTML. The NVD entry notes a network-exposed vulnerability with no confidentiality impact, partial integrity...

easymsgb_advisory.txt

============================================================ ============================================================ Title: Easy Message Board Directory Traversal and Remote Command Execution Vulnerability discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 08/05/2005...

CVE-2005-2479

CVE-2005-2479 affects Quick 'n Easy FTP Server 3.0. The OpenVAS entry and CVE references confirm a denial-of-service via a long USER command, enabling remote attackers to crash the application or cause CPU exhaustion. No vendor/version remediation or workaround is documented in the provided mater...

quickDoS.txt

Details: ======== Input to the user commands is not properly checked and/or filtered. Issuing a long argument to the user about 1024 caracteres commands will cause the corresponding process to die without any error message. this vulnerabilities exist in both the professionnal version 3.0 and lite...

Quick n EasY 3.0 FTP Server - Remote Denial of Service

Quick n EasY 3.0 FTP Server - Remote Denial of Service / Quick'n Easy FTP Server 3.0 pro and lite Remote D.o.S Exploit by Kozan Based on matiteman's code in perl Application: Quick 'n Easy FTP Server 3.0 pro and lite Vendor: www.pablosoftwaresolutions.com Discovered by: matiteman Exploit Coded by...

Quick 'n EasY 3.0 FTP Server - Remote Denial of Service

/ Quick'n Easy FTP Server 3.0 pro and lite Remote D.o.S Exploit by Kozan Based on matiteman's code in perl Application: Quick 'n Easy FTP Server 3.0 pro and lite Vendor: www.pablosoftwaresolutions.com Discovered by: matiteman Exploit Coded by: Kozan Credits to ATmaCA, matiteman Web:...

[SA16264] Easy PX 41 CMS Cross-Site Scripting and Information Disclosure

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Cisco IOS Easy VPN Server fails to properly process ISAKMP profile attributes

Overview Cisco IOS Easy VPN Server fails to properly process ISAKMP profile attributes. This may allow a remote, unauthenticated attacker to access the private network. Description Easy VPN Server Cisco IOS Easy VPN Server allows an IOS device to function as a VPN concentrator, providing...

CVE-2005-1550

easymsgb.pl in Easy Message Board allows remote attackers to execute arbitrary commands via shell metacharacters in the print parameter...

CVE-2005-1550

easymsgb.pl in Easy Message Board allows remote attackers to execute arbitrary commands via shell metacharacters in the print parameter...

CVE-2005-1549

Directory traversal vulnerability in easymsgb.pl in Easy Message Board allows remote attackers to read arbitrary files via a .. dot dot in the print parameter...

CVE-2005-1549

Directory traversal vulnerability in easymsgb.pl in Easy Message Board allows remote attackers to read arbitrary files via a .. dot dot in the print parameter...

CVE-2005-1549

The OpenVAS entries confirm a concrete vulnerability in Easy Message Board (Easy Message Board, Perl-based). The flaw resides in easymsgb.pl where input validation is inadequate, enabling directory traversal via the print parameter and potentially allowing remote command execution on the web serv...

CVE-2005-1550

CVE-2005-1550 affects Easy Message Board ( Perl-based bulletin board). The OpenVAS details describe an input validation flaw in the remote script, enabling a remote attacker to perform directory traversal or execute arbitrary commands on the host with the web server privileges. The issue is tied ...

CVE-2003-1146

The CVE describes a cross-site scripting (XSS) vulnerability in John Beatty Easy PHP Photo Album 1.0, exploitable via the dir parameter to inject arbitrary script/HTML. Multiple sources (NVD, Red Hat, CVE List) confirm the issue and its description. No explicit exploitation details, vectors beyon...

[Full-disclosure] Easy Message Board Directory Traversal and Remote Command

============================================================ ============================================================ Title: Easy Message Board Directory Traversal and Remote Command Execution Vulnerability discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 08/05/2005...

Easy Message Board - Remote Command Execution

Easy Message Board - Remote Command Execution source: https://www.securityfocus.com/bid/13555/info Easy Message Board is prone to a remote command execution vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input...