Server side scripts viewing in Goahead webserver <= 2.1.7

Luigi Auriemma Application: Goahead webserver http://12.129.4.11/webserver/webserver.htm Versions: = 2.1.7 Platforms: multiplatform Bug: source code viewing of server side script files Risk: low/medium Exploitation: easy via browser Date: 17 Dec 2003 Author: Luigi Auriemma e-mail:...

John Beatty Easy PHP Photo Album 1.0 - dir HTML Injection

John Beatty Easy PHP Photo Album 1.0 - dir HTML Injection source: https://www.securityfocus.com/bid/8977/info It has been reported that Easy PHP Photo Album is prone to a HTML injection vulnerability that may allow an attacker to execute HTML code in a user's browser. The issue is reported to be...

John Beatty Easy PHP Photo Album 1.0 - 'dir' HTML Injection

source: https://www.securityfocus.com/bid/8977/info It has been reported that Easy PHP Photo Album is prone to a HTML injection vulnerability that may allow an attacker to execute HTML code in a user's browser. The issue is reported to be present in the 'dir' parameter. This problem is due to...

Vulnerabilities in Easy File Sharing Web Server (1.2 NEW).

Vulnerabilities in Easy File Sharing Web Server 1.2 NEW. +-----------------------------+ Vendor: www.sharing-file.com Version: 1.2 new Date: Sep 22, 2003 Size: 2115KB Mini-description: "Easy File Sharing Web Server contains several built-in systems including HTTP Web Server,multi-threads database...

easyfile12.txt

Vulnerabilities in Easy File Sharing Web Server 1.2 NEW. +-----------------------------+ Vendor: www.sharing-file.com Version: 1.2 new Date: Sep 22, 2003 Size: 2115KB Mini-description: "Easy File Sharing Web Server contains several built-in systems including HTTP Web Server,multi-threads database...

Easy File Sharing Web Server multiple bugs

DoS, unauthorized logs and config access...

easyfile.txt

Advisory for Easy File Sharing web server 1.2... --- ------------------------------------------------------------------ Easy File Sharing Web Server 1.2 ------------------------------------------------------------------ -= by Drinsane [email protected] =- Product: -------- Easy File Sharing...

baby.txt

In this advisorie there are some vulnerabilities i found yesterday for BabyFtp server,Baby web server,Baby Pop3 server and Quick n' easy Ftp. I informed the Company about these vulnerabilities and here are the e-mails they sent me: -----------------------------------------------------------------...

CVE-2003-1146

Cross-site scripting XSS vulnerability in John Beatty Easy PHP Photo Album 1.0 allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

CVE-2002-1410

Easy Guestbook CGI programs do not authenticate the administrator, which allows remote attackers to 1 delete entries via direct access of admin.cgi, or 2 reconfigure Guestbook via direct access of config.cgi...

CVE-2002-1427

The printhtmltofile function in edit.cgi for Easy Homepage Creator 1.0 does not check user credentials, which allows remote attackers to modify home pages of other users...

EUVD-2002-1393

Easy Guestbook CGI programs do not authenticate the administrator, which allows remote attackers to 1 delete entries via direct access of admin.cgi, or 2 reconfigure Guestbook via direct access of config.cgi...

CVE-2002-1427

The CVE-2002-1427 entry affects Easy Homepage Creator 1.0. The print_html_to_file function in edit.cgi does not validate user credentials, enabling remote attackers to modify other users’ home pages. CVSS v2 data reports a base score of 7.5 ( HIGH ) with network attack vector, no authentication, ...

CVE-2002-1427

The printhtmltofile function in edit.cgi for Easy Homepage Creator 1.0 does not check user credentials, which allows remote attackers to modify home pages of other users...

CVE-2002-1410

The CVE-2002-1410 entry describes a vulnerability in Easy Guestbook CGI programs where administrator authentication is not performed. This permits remote attackers to directly access admin.cgi to delete entries or access config.cgi to reconfigure the Guestbook, without authentication. The connect...

CVE-2002-1410

Easy Guestbook CGI programs do not authenticate the administrator, which allows remote attackers to 1 delete entries via direct access of admin.cgi, or 2 reconfigure Guestbook via direct access of config.cgi...

Ben Chivers Easy Guestbook 1.0 - Administrative Access

Ben Chivers Easy Guestbook 1.0 - Administrative Access source: https://www.securityfocus.com/bid/5341/info The vulnerability has been reported for Easy Guestbook 1.0. It is possible for an atttacker to modify any user's guestbook by deleting entries. The vulnerability is the result of Guestbook...

Easy Homepage Creator Vulnerability

AresU Advisory 18/July/2002 Easy Homepage Creator Vulnerability Severity : High Possible to edit member homepage Systems Affected: Advanced Easy Homepage Creator v1.0 Easy Homepage Creator v1.0 Vendor URL: http://www.easyscripts.co.uk Vuln Type : It does not use Access Validation to edit homepage...

Ben Chivers Easy Guestbook 1.0 - Administrative Access

source: https://www.securityfocus.com/bid/5341/info The vulnerability has been reported for Easy Guestbook 1.0. It is possible for an atttacker to modify any user's guestbook by deleting entries. The vulnerability is the result of Guestbook failing to properly authenticate users who wish to edit...

Ben Chivers Easy Homepage Creator 1.0 - File Modification

source: https://www.securityfocus.com/bid/5340/info The vulnerability has been reported for Easy Homepage Creator. It is possible for an atttacker to modify any user's home page. The vulnerability is the result of Homepage Creator failing to properly authenticate users who wish to edit home pages...