CVE-2018-18912

CVE-2018-18912 affects Easy File Sharing (EFS) Web Server 7.2. The vulnerability is a stack-based buffer overflow triggered by a crafted POST request to forum.ghp when creating a new topic in the forums, allowing remote code execution. Public exploit details are present in third‑party description...

PT-2019-9667

Name of the Vulnerable Software and Affected Versions Easy File Sharing EFS Web Server version 7.2 Description A stack-based buffer overflow issue occurs when a malicious POST request is made to the "forum.ghp" endpoint upon creating a new topic in the forums. This allows remote attackers to...

CVE-2018-18912: Out-of-bounds Write

An issue was discovered in Easy File Sharing EFS Web Server 7.2. A stack-based buffer overflow vulnerability occurs when a malicious POST request has been made to forum.ghp upon creating a new topic in the forums, which allows remote attackers to execute arbitrary code...

EFS Easy File Sharing Web Server Buffer Overflow Vulnerability

EFS Easy File Sharing EFS Web Server is a set of file sharing software from the Dutch company EFS Software that combines the functions of a forum website, file uploading, downloading, sharing and image sharing. A stack buffer overflow vulnerability exists in EFS EFS Web Server version 7.2. A remo...

CVE-2018-9059

Stack-based buffer overflow in Easy File Sharing EFS Web Server 7.2 allows remote attackers to execute arbitrary code via a malicious login request to forum.ghp. NOTE: this may overlap CVE-2014-3791...

PT-2018-18821

Name of the Vulnerable Software and Affected Versions Easy File Sharing EFS Web Server version 7.2 Description The issue is related to a stack-based buffer overflow that allows remote attackers to execute arbitrary code. This can be achieved by sending a malicious login request to the 'forum.ghp'...

CVE-2018-9059: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Easy File Sharing EFS Web Server 7.2 allows remote attackers to execute arbitrary code via a malicious login request to forum.ghp. NOTE: this may overlap CVE-2014-3791...

Easy File Sharing Web Server 7.2 - Account Import Local Buffer Overflow (SEH) Exploit

Exploit for windows platform in category local exploits !/usr/bin/python 2017/6/17 Chako EFS Web Server 7.2 - Local Buffer OverflowSEH Tested on: Windows XP SP3 EN DEP Off Software Link: https://www.exploit-db.com/apps/60f3ff1f3cd34dec80fba130ea481f31-efssetup.exe Description: When importing a...

Easy File Sharing Web Server 7.2 - Account Import Local Buffer Overflow (SEH)

Easy File Sharing Web Server 7.2 - Account Import Local Buffer Overflow SEH !/usr/bin/python 2017/6/17 Chako EFS Web Server 7.2 - Local Buffer OverflowSEH Tested on: Windows XP SP3 EN DEP Off Software Link: https://www.exploit-db.com/apps/60f3ff1f3cd34dec80fba130ea481f31-efssetup.exe Description:...

Easy File Sharing Web Server 7.2 - Account Import Local Buffer Overflow (SEH)

!/usr/bin/python 2017/6/17 Chako EFS Web Server 7.2 - Local Buffer OverflowSEH Tested on: Windows XP SP3 EN DEP Off Software Link: https://www.exploit-db.com/apps/60f3ff1f3cd34dec80fba130ea481f31-efssetup.exe Description: When importing a large user account file on to EFS Web Server 7.2 will...

CVE-2014-5178

Multiple cross-site scripting XSS vulnerabilities in Easy File Sharing EFS Web Server 6.8 allow remote authenticated users to inject arbitrary web script or HTML via the content parameter when 1 creating a topic or 2 posting an answer. NOTE: some of these details are obtained from third party...

CVE-2014-5178

Multiple cross-site scripting XSS vulnerabilities in Easy File Sharing EFS Web Server 6.8 allow remote authenticated users to inject arbitrary web script or HTML via the content parameter when 1 creating a topic or 2 posting an answer. NOTE: some of these details are obtained from third party...

CVE-2014-5178

CVE-2014-5178 affects Easy File Sharing (EFS) Web Server 6.8. The vulnerability is cross-site scripting (XSS) triggered by the content parameter during topic creation or when posting an answer, exploitable by remote authenticated users. The provided documents do not specify a patch or a remediati...

PT-2014-6317

Name of the Vulnerable Software and Affected Versions Easy File Sharing EFS Web Server version 6.8 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via the content parameter when creating a topic or posting an answer, potentially leading to cross-site...

CVE-2014-5178: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Easy File Sharing EFS Web Server 6.8 allow remote authenticated users to inject arbitrary web script or HTML via the content parameter when 1 creating a topic or 2 posting an answer. NOTE: some of these details are obtained from third party...

CVE-2014-3791

CVE-2014-3791 affects Easy File Sharing Web Server (EFS) Web Server, with a stack-based buffer overflow in the SESSIONID cookie handling (UserID) in vfolder.ghp, enabling remote code execution. The Red Hat entry reiterates the same description for EFS Web Server 6.8. Exploitation details are not ...

PT-2014-5503

Name of the Vulnerable Software and Affected Versions Easy File Sharing EFS Web Server version 6.8 Description The issue is a stack-based buffer overflow that allows remote attackers to execute arbitrary code. This is achieved by sending a long string in the UserID parameter to the "vfolder.ghp"...

CVE-2014-3791: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Easy File Sharing EFS Web Server 6.8 allows remote attackers to execute arbitrary code via a long string in a cookie UserID parameter to vfolder.ghp...

CVE-2009-4809

Affects Easy File Sharing (EFS) Web Server 4.8. The vulnerability is a directory traversal in thumbnail.ghp where an attacker can read arbitrary files by manipulating the vfolder parameter (dot-dot sequence). This is a file-read impact, enabling access to portions of the server’s filesystem. The ...

CVE-2009-4809: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in thumbnail.ghp in Easy File Sharing EFS Web Server 4.8 allows remote attackers to read arbitrary files via a .. dot dot in the vfolder parameter...