EZMeeting 3.x EZNet.EXE Long HTTP Request Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9167/info A problem has been identified in the handling of some types of requests by the eZ package, resulting in a buffer overrun. Because of this, it may be possible for a remote attacker to execute arbitrary code and...

EZ-Shop 1.02 Lateral SQL Injection Vulnerability

No description provided by source...

EZ Server 1.0 Long Argument Local Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7243/info It has been reported that the EZ Server software does not sufficiently handle strings of excessive length in some circumstances. Because of this, a remote attacker may be able to deny service to legitimate users...

EZ Systems HTTPBench 1.1 Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6153/info An information disclosure vulnerability has been reported for httpbench. Reportedly, httpbench may disclose the contents of web server readable files to remote attackers. Information obtained in this manner may ...

EZ Invoice Inc. EZI 2.0 Invoices.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16133/info EZI is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result i...

EZ Publish 2.2.7/3.0 site.ini Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7347/info eZ Publish has been reported prone to sensitive information disclosure vulnerability. An attacker may make a request for and download the underlying site.ini configuration file. The file contains eZ Publish...

CVE-2012-1565

Unspecified vulnerability in ez Publish 4.1.4, 4.2, 4.3, 4.4, 4.5, and 4.6 has unknown impact and attack vectors related to an insecure direct object reference...

Design/Logic Flaw

Unspecified vulnerability in ez Publish 4.1.4, 4.2, 4.3, 4.4, 4.5, and 4.6 has unknown impact and attack vectors related to an insecure direct object reference...

CVE-2012-1565

Unspecified vulnerability in ez Publish 4.1.4, 4.2, 4.3, 4.4, 4.5, and 4.6 has unknown impact and attack vectors related to an insecure direct object reference...

CVE-2012-1565

Technical details and affected versions are not publicly available in the provided documents. Monitor for updates from official advisories.

PT-2012-3347

Name of the Vulnerable Software and Affected Versions ez Publish versions 4.1.4, 4.2, 4.3, 4.4, 4.5, and 4.6 Description The issue is related to an insecure direct object reference, but the specific details about the impact and attack vectors are not provided. Recommendations For ez Publish...

CVE-2012-1565: Undefined Security Weakness

Unspecified vulnerability in ez Publish 4.1.4, 4.2, 4.3, 4.4, 4.5, and 4.6 has unknown impact and attack vectors related to an insecure direct object reference...

Ez Cart - SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

CVE-2012-1597

Cross-site scripting XSS vulnerability in the textEncode function in classes/ezjscajaxcontent.php in eZ JS Core in eZ Publish before 1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the textEncode function in classes/ezjscajaxcontent.php in eZ JS Core in eZ Publish before 1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-1597

Cross-site scripting XSS vulnerability in the textEncode function in classes/ezjscajaxcontent.php in eZ JS Core in eZ Publish before 1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-1597

Cross-site scripting XSS vulnerability in the textEncode function in classes/ezjscajaxcontent.php in eZ JS Core in eZ Publish before 1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-1597

Cross-site scripting (XSS) in eZ Publish’s eZ JS Core, via the textEncode function in classes/ezjscajaxcontent.php, affects eZ Publish versions before 1.5. Described as allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. Root cause/details are not elaborated ...

CVE-2012-1597: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the textEncode function in classes/ezjscajaxcontent.php in eZ JS Core in eZ Publish before 1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2012-3369

Name of the Vulnerable Software and Affected Versions eZ Publish versions prior to 1.5 Description A cross-site scripting XSS issue exists due to a vulnerability in the textEncode function in classes/ezjscajaxcontent.php in eZ JS Core. This allows remote attackers to inject arbitrary web script o...