CVE-2006-3844

CVE-2006-3844 / CVE-2006-2027 family involves a buffer overflow in Quick ’n Easy FTP Server (3.0) affecting the server’s handling of long arguments during FTP commands. The issue is described as a buffer overflow in the Unicode/logging processing path, which can allow remote authenticated users t...

Preemptive Protection against CesarFTP and XM Easy Personal FTP Server Buffer Overflow Vulnerabilities

XM Easy Personal FTP Server fails to validate user-supplied data. Attacker can exploit this issue to execute arbitrary code on the affected server. CesarFTP contains a buffer overflow error in the handling of overly long arguments passed to the MKD command. Remote attackers can compromise a...

MSN Messnger chat history intercepted and the encryption-vulnerability warning-the black bar safety net

MSN Messenger is the Microsoft Corp launched instant messaging software. MSN Messenger with its excellent performance and easy operation, it has been among the of currently the world's most widely used IM softwareinstant messaging software, in domestic also has many users, is the only one can and...

xmepftp.txt

!/usr/bin/perl ----------------------------------------------------------- Name : XM Easy Personal FTP Server Version : 5.0.1 ----------------------------------------------------------- Type : dos / remote Multiple buffer overflows Port and multiple commands with A%n,...

easycms.txt

Easy CMS 0.1.2 Php Shell Upload Vulnerabilities ---------------------------------------------------- site:http://sourceforge.net/projects/php-easy-cms/ demo:http://www.easy-cms.be/ -------------------------------------------------- Bug: 1http://victim/choosefile.php Documents Images Scripts Style...

XM Easy Personal FTP Server 5.0.1 (Port) Remote Overflow PoC

No description provided by source. !/usr/bin/perl ----------------------------------------------------------- Name : XM Easy Personal FTP Server Version : 5.0.1 ----------------------------------------------------------- Type : dos / remote Multiple buffer overflows Port and multiple commands wit...

XM Easy Personal FTP Server 5.0.1 (Port) Remote Overflow PoC

Exploit for unknown platform in category dos / poc ============================================================ XM Easy Personal FTP Server 5.0.1 Port Remote Overflow PoC ============================================================ !/usr/bin/perl...

XM Easy Personal FTP Server 5.0.1 - Port Remote Overflow (PoC)

XM Easy Personal FTP Server 5.0.1 - Port Remote Overflow PoC !/usr/bin/perl ----------------------------------------------------------- Name : XM Easy Personal FTP Server Version : 5.0.1 ----------------------------------------------------------- Type : dos / remote Multiple buffer overflows Port...

XM Easy Personal FTP Server 5.0.1 - 'Port' Remote Overflow (PoC)

!/usr/bin/perl ----------------------------------------------------------- Name : XM Easy Personal FTP Server Version : 5.0.1 ----------------------------------------------------------- Type : dos / remote Multiple buffer overflows Port and multiple commands with A%n,...

CVE-2006-3128

choosefile.php in easy-CMS 0.1.2, when modmime is installed, does not restrict uploads of filenames with multiple extensions, which allows remote attackers to execute arbitrary PHP code by uploading a PHP file with a GIF file extension, then directly accessing that file in the Repositories...

CVE-2006-3128

The CVE-2006-3128 issue affects easy-CMS 0.1.2 when mod_mime is active: the upload check does not restrict filenames with multiple extensions, enabling an attacker to upload a PHP file named with a GIF extension and then access it in the Repositories directory to achieve arbitrary PHP code execut...

CVE-2006-3128

choosefile.php in easy-CMS 0.1.2, when modmime is installed, does not restrict uploads of filenames with multiple extensions, which allows remote attackers to execute arbitrary PHP code by uploading a PHP file with a GIF file extension, then directly accessing that file in the Repositories...

Easy CMS 0.1.2 Php Shell Upload Vulnerabilities

Easy CMS 0.1.2 Php Shell Upload Vulnerabilities ---------------------------------------------------- site:http://sourceforge.net/projects/php-easy-cms/ demo:http://www.easy-cms.be/ -------------------------------------------------- Bug: 1http://victim/choosefile.php Documents Images Scripts Style...

HotPlugCMS_1.0 - SQL Injection Vulnerability

HotPlugCMS doesn't check input field values, so logging in on /hotplugcms/administration/tblcontent is very easy with ' OR 1=1 / and a SQL-inject will bypass the entire authentication process. Typical, very simple SQL Injection. peda...

CVE-2006-3002

Cross-site scripting XSS vulnerability in details.php in Easy Ad-Manager allows remote attackers to inject arbitrary web script or HTML via the mbid parameter, which is reflected in an error message. NOTE: on 20060829, the vendor notified CVE that this issue has been fixed...

CVE-2006-3003

details.php in Easy Ad-Manager allows remote attackers to obtain the full installation path via an invalid mbid parameter, which leaks the path in an error message. NOTE: this might be resultant from another vulnerability, since this vector also produces cross-site scripting XSS. NOTE: on 2006082...

CVE-2006-3003

details.php in Easy Ad-Manager allows remote attackers to obtain the full installation path via an invalid mbid parameter, which leaks the path in an error message. NOTE: this might be resultant from another vulnerability, since this vector also produces cross-site scripting XSS. NOTE: on 2006082...

CVE-2006-3003

CVE-2006-3003 affects Easy Ad-Manager: details.php accepts an invalid mbid parameter which can reveal the full installation path in an error message. The issue may tie to a related XSS vector. The vendor was notified on 2006-08-29 that the issue was fixed. The public details specify the vulnerabi...

CVE-2006-3002

The CVE-2006-3002 issue affects Easy Ad-Manager (details.php) with an XSS in the mbid parameter, where input reflected in an error message can lead to arbitrary script execution. The vulnerability is described across multiple sources (NVD, CVE List) as a reflected XSS. A fix was reported by the v...

CVE-2006-3002

Cross-site scripting XSS vulnerability in details.php in Easy Ad-Manager allows remote attackers to inject arbitrary web script or HTML via the mbid parameter, which is reflected in an error message. NOTE: on 20060829, the vendor notified CVE that this issue has been fixed...