CVE-2006-0636

EyeOS

CVE-2007-4609

eyeOS is affected by CVE-2007-4609 due to predictable checksum values in the checknum parameter used for access control. This allows remote attackers to abuse doCreateUser to register many accounts and add many eyeBoard messages via addMsg, potentially causing denial of service or enabling unauth...

CVE-2005-3414

CVE-2005-3414 affects eyeOS 0.8.4. The issue arises from storing usrinfo.xml in the web document root with insufficient access control, allowing remote attackers to obtain user credentials. The available connected documents confirm eyeOS 0.8.4 and the credential exposure risk, but do not provide ...

CVE-2005-3413

EyeOS 0.8.4 contains a Cross-site scripting (XSS) vulnerability in desktop.php where the motd parameter is not properly sanitized, allowing remote attackers to inject arbitrary script or HTML. This could lead to user’s browser executing malicious code in the context of the affected eyeOS session....

CVE-2006-5071

CVE-2006-5071 corresponds to multiple XSS vulnerabilities in eyeOS prior to 0.9.1. The affected component set includes eyeNav and system/baixar.php, enabling remote attackers to inject arbitrary web script or HTML. The issue is documented across NVD and related advisories, with eyeOS 0.9.1 cited ...