11 matches found
Stack overflow
An issue was discovered in Easy File Sharing EFS Web Server 7.2. A stack-based buffer overflow vulnerability occurs when a malicious POST request has been made to forum.ghp upon creating a new topic in the forums, which allows remote attackers to execute arbitrary code...
CVE-2018-18912: Out-of-bounds Write
An issue was discovered in Easy File Sharing EFS Web Server 7.2. A stack-based buffer overflow vulnerability occurs when a malicious POST request has been made to forum.ghp upon creating a new topic in the forums, which allows remote attackers to execute arbitrary code...
PT-2019-9667
Name of the Vulnerable Software and Affected Versions Easy File Sharing EFS Web Server version 7.2 Description A stack-based buffer overflow issue occurs when a malicious POST request is made to the "forum.ghp" endpoint upon creating a new topic in the forums. This allows remote attackers to...
CVE-2018-9059
Stack-based buffer overflow in Easy File Sharing EFS Web Server 7.2 allows remote attackers to execute arbitrary code via a malicious login request to forum.ghp. NOTE: this may overlap CVE-2014-3791...
Stack overflow
Stack-based buffer overflow in Easy File Sharing EFS Web Server 7.2 allows remote attackers to execute arbitrary code via a malicious login request to forum.ghp. NOTE: this may overlap CVE-2014-3791...
CVE-2018-9059: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in Easy File Sharing EFS Web Server 7.2 allows remote attackers to execute arbitrary code via a malicious login request to forum.ghp. NOTE: this may overlap CVE-2014-3791...
PT-2018-18821
Name of the Vulnerable Software and Affected Versions Easy File Sharing EFS Web Server version 7.2 Description The issue is related to a stack-based buffer overflow that allows remote attackers to execute arbitrary code. This can be achieved by sending a malicious login request to the 'forum.ghp'...
Cross site scripting
Cross-site scripting XSS vulnerability in Easy File Sharing Web Server 6.8 allows remote attackers to inject arbitrary web script or HTML via the username field during registration, which is not properly handled by forum.ghp...
CVE-2014-9439
Cross-site scripting XSS vulnerability in Easy File Sharing Web Server 6.8 allows remote attackers to inject arbitrary web script or HTML via the username field during registration, which is not properly handled by forum.ghp...
CVE-2014-9439
CVE-2014-9439 is an XSS vulnerability in Easy File Sharing Web Server 6.8. The issue arises from improper handling of the username field during registration, allowing remote attackers to inject arbitrary web script or HTML via forum.ghp. This is documented across multiple sources; exploitation de...
PT-2015-4202
Name of the Vulnerable Software and Affected Versions Easy File Sharing Web Server version 6.8 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the username field during registration. This occurs because the input is not...