EUVD-2015-0921

Malware in sbrugna...

EUVD-2015-0922

Malware in sbrugna...

EUVD-2015-0920

Malware in sbrugna...

EasyCTF Cross-Site Scripting Vulnerability

EasyCTF is a CGI program for scoring CTFs. EasyCTF suffers from an unspecified cross-site scripting vulnerability that could be exploited by remote attackers to inject malicious script or HTML code, which could be used to gain access to sensitive information or hijack user sessions when malicious...

EasyCTF Unauthorized Access Vulnerability

EasyCTF is a CGI program for scoring CTFs. EasyCTF fails to properly verify session IDs, allowing remote attackers to gain unauthorized access via special HTTP requests...

EasyCTF Arbitrary File Content Write Vulnerability

EasyCTF is a CGI program for scoring CTFs. EasyCTF has an unspecified security vulnerability that could be exploited by remote attackers to write arbitrary executable content to a file...

CVE-2015-0914

EasyCTF before 1.4 does not validate the session ID, which allows remote attackers to obtain access via a crafted HTTP request...

CVE-2015-0913

Cross-site scripting XSS vulnerability in EasyCTF before 1.4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-0912

EasyCTF before 1.4 allows remote authenticated users to write executable content to files via unspecified vectors...

Cross site request forgery (csrf)

EasyCTF before 1.4 does not validate the session ID, which allows remote attackers to obtain access via a crafted HTTP request...

Code injection

EasyCTF before 1.4 allows remote authenticated users to write executable content to files via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in EasyCTF before 1.4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-0912

EasyCTF is a server-side CGI scoring tool. A vulnerability (CWE-22) allows a remote attacker to create arbitrary files on the server, which may lead to arbitrary code execution. Affected products: EasyCTF 1.3 and earlier. Root cause involves improper handling of file writes (arbitrary file creati...

CVE-2015-0912

EasyCTF before 1.4 allows remote authenticated users to write executable content to files via unspecified vectors...

CVE-2015-0913

CVE-2015-0913 affects EasyCTF (server-side CGI) with a cross-site scripting (CWE-79) vulnerability that allows remote authenticated users to inject arbitrary script/HTML via unspecified vectors. The connected JVN/NVD entries indicate EasyCTF versions 1.3 and earlier are vulnerable. Root cause: in...

CVE-2015-0914

CVE-2015-0914 affects EasyCTF prior to 1.4. The vulnerability is a session management weakness (CWE-639) where session IDs are not validated, allowing a remote attacker to gain unauthorized access via a crafted HTTP request. Impact stated: possible login and information disclosure without credent...

CVE-2015-0913

Cross-site scripting XSS vulnerability in EasyCTF before 1.4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-0914

EasyCTF before 1.4 does not validate the session ID, which allows remote attackers to obtain access via a crafted HTTP request...

EasyCTF vulnerable to cross-site scripting

Overview EasyCTF is a server side CGI used to score CTF Capture The Flag. EasyCTF contains a cross-site scripting vulnerability CWE-79 that can be leveraged by an attacker created account. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

JVN#07538357: EasyCTF vulnerable to cross-site scripting

EasyCTF is a server side CGI used to score CTF Capture The Flag. EasyCTF contains a cross-site scripting vulnerability CWE-79 that can be leveraged by an attacker created account. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the late...