CVE-2005-1549

Directory traversal vulnerability in easymsgb.pl in Easy Message Board allows remote attackers to read arbitrary files via a .. dot dot in the print parameter...

CVE-2005-1550

easymsgb.pl in Easy Message Board allows remote attackers to execute arbitrary commands via shell metacharacters in the print parameter...

CVE-2005-1549

The OpenVAS entries confirm a concrete vulnerability in Easy Message Board (Easy Message Board, Perl-based). The flaw resides in easymsgb.pl where input validation is inadequate, enabling directory traversal via the print parameter and potentially allowing remote command execution on the web serv...

CVE-2005-1550

easymsgb.pl in Easy Message Board allows remote attackers to execute arbitrary commands via shell metacharacters in the print parameter...

CVE-2005-1549

Directory traversal vulnerability in easymsgb.pl in Easy Message Board allows remote attackers to read arbitrary files via a .. dot dot in the print parameter...

CVE-2005-1550: Undefined Security Weakness

easymsgb.pl in Easy Message Board allows remote attackers to execute arbitrary commands via shell metacharacters in the print parameter...

CVE-2005-1549: Undefined Security Weakness

Directory traversal vulnerability in easymsgb.pl in Easy Message Board allows remote attackers to read arbitrary files via a .. dot dot in the print parameter...

CVE-2003-1146

The CVE describes a cross-site scripting (XSS) vulnerability in John Beatty Easy PHP Photo Album 1.0, exploitable via the dir parameter to inject arbitrary script/HTML. Multiple sources (NVD, Red Hat, CVE List) confirm the issue and its description. No explicit exploitation details, vectors beyon...

CVE-2003-1146: Undefined Security Weakness

Cross-site scripting XSS vulnerability in John Beatty Easy PHP Photo Album 1.0 allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

[Full-disclosure] Easy Message Board Directory Traversal and Remote Command

============================================================ ============================================================ Title: Easy Message Board Directory Traversal and Remote Command Execution Vulnerability discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 08/05/2005...

Easy Message Board - Remote Command Execution

Easy Message Board - Remote Command Execution source: https://www.securityfocus.com/bid/13555/info Easy Message Board is prone to a remote command execution vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input...

Easy Message Board - Directory Traversal

source: https://www.securityfocus.com/bid/13551/info Easy Message Board is prone to a directory traversal vulnerability that could allow attackers to read files outside the Web root. http://www.example/com/cgi-bin/emsgb/easymsgb.pl?print=../../../../../../../../etc/passwd...

Easy Message Board - Remote Command Execution

source: https://www.securityfocus.com/bid/13555/info Easy Message Board is prone to a remote command execution vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. http://www.example.com/cgi-bin/emsgb/easymsgb.pl?print=|id|...

CVE-2005-1057

Cisco IOS 12.2T, 12.3 and 12.3T, when using Easy VPN Server XAUTH version 6 authentication, allows remote attackers to bypass authentication via a "malformed packet."...

CVE-2005-1057

Cisco IOS 12.2T, 12.3 and 12.3T, when using Easy VPN Server XAUTH version 6 authentication, allows remote attackers to bypass authentication via a "malformed packet."...

CVE-2005-1057

Cisco IOS 12.2T, 12.3 and 12.3T with Easy VPN Server XAUTH version 6 authentication are affected by a vulnerability that allows a remote attacker to bypass authentication via a malformed XAUTH packet. The issue resides in processing certain IKE XAUTH messages when configured for Easy VPN Server, ...

CVE-2005-1057: Undefined Security Weakness

Cisco IOS 12.2T, 12.3 and 12.3T, when using Easy VPN Server XAUTH version 6 authentication, allows remote attackers to bypass authentication via a "malformed packet."...

Vulnerabilities in the Internet Key Exchange Xauth Implementation

Cisco Internetwork Operating System IOS Software release trains 12.2T, 12.3 and 12.3T may contain vulnerabilities in processing certain Internet Key Exchange IKE Xauth messages when configured to be an Easy VPN Server. Successful exploitation of these vulnerabilities may permit an unauthorized us...

Cisco Security Advisory: Vulnerabilities in the Internet Key Exchange Xauth Implementation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: ======================== Vulnerabilities in the Internet Key Exchange Xauth Implementation ================================================================= Revision 1.0 For Public Release 2005 April 6 1600 UTC -...

Cisco IOS IKE XAUTH ISAKMP IPSec SA Establish Authentication Bypass (CSCeg00277)

The remote version of IOS contains a feature called 'Easy VPN Server' that allows the administrator of the remote router to create a lightweight VPN server. There is an implementation flaw in the remote version of this software that could allow an authorized user to complete authentication and...