431 matches found
EFS Easy Address Book Web Server 1.2 - Remote File Stream
EFS Easy Address Book Web Server 1.2 - Remote File Stream / ========================================================================== 0-day Alternative File Stream Exploit for EFS Easy Address Book Web Server =========================================================================== EFS' Easy...
EFS Easy Address Book Web Server <= 1.2 Remote File Stream Exploit
Exploit for unknown platform in category remote exploits ================================================================== EFS Easy Address Book Web Server GLinares.code at gmail dot com This tool demonstrates EFS' Easy Address Book Web Server Vulnerability to Alternative Data Stream GET request...
eabweb.txt
Easy Address Book Web Server Format String Vulnerability Software: Easy Address Book Web Server Version: 1.2 Website: http://www.efssoft.com/ Description: Easy Address Book Web Server is a Web Address Book software that allows users to view, search, add, edit, or administer address books easily...
[EXPL] Easy File Sharing FTP Server PASS Buffer Overflow (Exploit)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
Immunity Canvas: EASYFILESHARING
Name| easyfilesharing ---|--- CVE| CVE-2006-3952 Exploit Pack| CANVAS Description| easyfilesharing Notes| CVSS: 7.5 Repeatability: One shot VENDOR: EFS Software CVE Url: https://vulners.com/cve/CVE-2006-3952 CVE Name: CVE-2006-3952...
CVE-2006-3952
The CVE-2006-3952 issue concerns Easy File Sharing Software’s FTP server (EFS FTP Server). A stack-based buffer overflow is triggered by a long PASS command parameter, allowing remote attackers to execute arbitrary code. The original report targets Easy File Sharing FTP Server 2.0, and later refe...
CVE-2006-3952: Undefined Security Weakness
Stack-based buffer overflow in EFS Software Easy File Sharing FTP Server 2.0 allows remote attackers to execute arbitrary code via a long argument to the PASS command. NOTE: the provenance of this information is unknown; the details are obtained from third party information...
CVE-2003-1297
CVE-2003-1297 affects Easy File Sharing (EFS) Web Server 1.2. The web server stores the option.ini (options.ini) file and the log directory under the web root with insufficient access control, enabling remote attackers to read sensitive data. The disclosed data can include an SMTP account usernam...
CVE-2003-1296
CVE-2003-1296 affects Easy File Sharing (EFS) Web Server 1.2. The issue allows remote authenticated users to cause a denial of service by supplying an empty “Title” field or certain data in the “Your Message” field (potentially a long argument). No exploit details or remediation are provided in t...
CVE-2003-1297: Undefined Security Weakness
Easy File Sharing EFS Web Server 1.2 stores the 1 option.ini aka options.ini file and 2 log directory under the web root with insufficient access control, which allows remote attackers to obtain sensitive information including an SMTP account username and password hash, the server configuration,...
CVE-2003-1296: Undefined Security Weakness
Easy File Sharing EFS Web Server 1.2 allows remote authenticated users to cause a denial of service via 1 an "empty symbol" in the Title field or 2 certain data in the Your Message field, possibly a long argument...
CVE-2006-1160
Cross-site scripting XSS vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote attackers to inject arbitrary web script or HTML via the Description field in creating a folder or uploading a file...
Cross site scripting
Cross-site scripting XSS vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote attackers to inject arbitrary web script or HTML via the Description field in creating a folder or uploading a file...
CVE-2006-1159
Format string vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in the query string argument in an HTTP GET request...
CVE-2006-1160
Cross-site scripting XSS vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote attackers to inject arbitrary web script or HTML via the Description field in creating a folder or uploading a file...
CVE-2006-1161
CVE-2006-1161 affects Easy File Sharing Web Server (EFS) Web Server 3.2. It describes an absolute path traversal that allows remote registered users to upload a malicious file to the Windows startup folder and thereby execute arbitrary code. The provided documents consistently identify the vulner...
CVE-2006-1160
CVE-2006-1160 affects Easy File Sharing Web Server (EFS) Web Server 3.2. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the Description field when creating a folder or uploading a file. The provided sources specify th...
CVE-2006-1159
Format string vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in the query string argument in an HTTP GET request...
CVE-2006-1159: Undefined Security Weakness
Format string vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in the query string argument in an HTTP GET request...
CVE-2006-1161: Undefined Security Weakness
Absolute path traversal vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote registered users to execute arbitrary code by uploading a malicious file to the Windows startup folder...