CVE-2006-5714

Affected software: Easy File Sharing Web Server (EFS) Web Server 4.0. Vulnerability: remote information disclosure via alternate data streams. The bug occurs on NTFS filesystems when a crafted HTTP GET appends ":$DATA" to access ADS, allowing reading arbitrary files under the web root. Root cause...

CVE-2006-1159

CVE-2006-1159 describes a format string vulnerability in Easy File Sharing (EFS) Web Server 3.2. The issue allows remote attackers to trigger a denial of service (server crash) and potentially execute arbitrary code via format string specifiers in the query string argument of an HTTP GET request....

CVE-2006-1160

CVE-2006-1160 affects Easy File Sharing Web Server (EFS) Web Server 3.2. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the Description field when creating a folder or uploading a file. The provided sources specify th...

CVE-2004-1744

Technical details about CVE-2004-1744 are not provided in the connected documents. The Initial Description lacks vendor/product/version specifics or fixes. Monitor for updates.

CVE-2006-5713

CVE-2006-5713 describes an XSS vulnerability in Easy File Sharing (EFS) Web Server 4.0. The issue allows remote attackers to inject arbitrary web script or HTML through the forum-thread posting parameters: author, content, or title. The metadata indicates cross-site scripting with no confidential...

CVE-2006-1161

CVE-2006-1161 affects Easy File Sharing Web Server (EFS) Web Server 3.2. It describes an absolute path traversal that allows remote registered users to upload a malicious file to the Windows startup folder and thereby execute arbitrary code. The provided documents consistently identify the vulner...

CVE-2004-1743

CVE-2004-1743 affects Easy File Sharing (EFS) Webserver 1.25. The vulnerability allows remote attackers to view arbitrary files by sending an HTTP request targeting the disk_c virtual folder. The root cause is improper access handling in the web server’s disk_c folder, resulting in exposure of fi...