CVE-2009-4317: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in ScriptsEz Ez Cart allows remote attackers to inject arbitrary web script or HTML via the sid parameter in a showcat action...

Ez Guestbook 1.0 Cross Site Request Forgery

------------------------------------------------------------------------------------------------- Title: Ez Guestbook 1.0 Multiple Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 14. December 2009...

Ez Poll Hoster Multiple XSS and XSRF Vulnerabilities

Exploit for unknown platform in category web applications ==================================================== Ez Poll Hoster Multiple XSS and XSRF Vulnerabilities ====================================================...

Ez Cart - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41696/info Ez Cart is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...

Ez Cart - 'sid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37311/info Ez Cart is prone to is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Ez Poll Hoster - Multiple Cross-Site Scripting / Cross-Site Request Forgery Vulnerabilities

----------------------------------------------------------------------------------------------- Title: Ez Poll Hoster Multiple XSS and XSRF Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 14. December 2009...

Ez Guestbook 1.0 - Multiple Vulnerabilities

------------------------------------------------------------------------------------------------- Title: Ez Guestbook 1.0 Multiple Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 14. December 2009...

Ez Poll Hoster - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/41742/info Ez Poll Hoster is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

CVE-2009-3588: Undefined Security Weakness

Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise formerly eTrust Antivirus 7.1 through r8.1; Anti-Virus 2007 v8 through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 v3 through Plus 2009; and other CA products allows...

PT-2009-5869 · Ca · Ca Anti-Virus For The Enterprise +3

Name of the Vulnerable Software and Affected Versions: CA Anti-Virus for the Enterprise versions 7.1 through r8.1 CA Anti-Virus 2007 through 2009 CA eTrust EZ Antivirus version r7.1 CA Internet Security Suite 2007 through Plus 2009 Description: The issue is related to a crafted RAR archive file...

CVE-2009-3587: Undefined Security Weakness

Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise formerly eTrust Antivirus 7.1 through r8.1; Anti-Virus 2007 v8 through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 v3 through Plus 2009; and other CA products allows...

Unfixed XSS vulnerability at ez-internet.org

Security researcher jath, has submitted on 22/09/2009 a cross-site-scripting XSS vulnerability affecting ez-internet.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/11/2011. It is currently...

Ez Album Persistent Cross Site Scripting

/ Ez Album XSS Script Injection Vulnerability Discovered by : MizoZ Contact : [email protected] Date : July 29 2009 Greetings : Moudi , Zuka, All friends / We can inject HTML Scripts from the add comment , not in the comment but in the name input . exemple :...

Sql injection

SQL injection vulnerability in content.php in Scripts For Sites SFS EZ Career allows remote attackers to execute arbitrary SQL commands via the topic parameter...

CVE-2008-6867

SQL injection vulnerability in content.php in Scripts For Sites SFS EZ Career allows remote attackers to execute arbitrary SQL commands via the topic parameter...

CVE-2008-6867

CVE-2008-6867 describes an SQL injection in content.php of Scripts For Sites (SFS) EZ Career, exploitable by remote attackers via the topic parameter to execute arbitrary SQL commands. The vulnerability is rated HIGH (CVSS v2: AV:N/AC:L/Au:N/C:P/I:P/A:P) with a base score of 7.5. Multiple sources...

CVE-2008-6867

SQL injection vulnerability in content.php in Scripts For Sites SFS EZ Career allows remote attackers to execute arbitrary SQL commands via the topic parameter...

CVE-2008-6867: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in content.php in Scripts For Sites SFS EZ Career allows remote attackers to execute arbitrary SQL commands via the topic parameter...

Authentication flaw

The registration view /user/register in eZ Publish 3.5.6 and earlier, and possibly other versions before 3.9.5, 3.10.1, and 4.0.1, allows remote attackers to gain privileges as other users via modified ContentObjectAttributedatauserlogin30, ContentObjectAttributedatauserpassword30, and other...

CVE-2008-6844

The registration view /user/register in eZ Publish 3.5.6 and earlier, and possibly other versions before 3.9.5, 3.10.1, and 4.0.1, allows remote attackers to gain privileges as other users via modified ContentObjectAttributedatauserlogin30, ContentObjectAttributedatauserpassword30, and other...