Design/Logic Flaw

Pantomime in Ecartis 1.0.0 snapshot 20050909 stores e-mail attachments in a publicly accessible directory, which may allow remote attackers to upload arbitrary files...

CVE-2003-0162

CVE-2003-0162 affects Ecartis 1.0.0 (formerly listar) prior to the 20030227 snapshot. The vulnerability lets a remote attacker reset other users’ passwords and gain privileges by tampering with hidden HTML form fields. Debian and OpenVAS records tie this to a remote password-change flaw in ecarti...

CVE-2002-0468

CVE-2002-0468 affects Ecartis (formerly Listar) 1.0.0 and earlier snapshots. The vulnerability arises from buffer overflows in core code paths handling command line arguments and string formatting, including potential bad uses of sprintf() in files such as core.c, moderate.c, lcgi.c, fileapi.c, c...