CVE-2018-18912

CVE-2018-18912 affects Easy File Sharing (EFS) Web Server 7.2. The vulnerability is a stack-based buffer overflow triggered by a crafted POST request to forum.ghp when creating a new topic in the forums, allowing remote code execution. Public exploit details are present in third‑party description...

CVE-2018-9059

CVE-2018-9059 affects Easy File Sharing Web Server 7.2 and is a stack-based buffer overflow in the login handling (forum.ghp path), enabling remote code execution. Public indicators of exploitation include CIRCL sightings referencing a Metasploit module for Windows EFS (efs_fmws_userid_bof.rb) an...

CVE-2009-4809

Affects Easy File Sharing (EFS) Web Server 4.8. The vulnerability is a directory traversal in thumbnail.ghp where an attacker can read arbitrary files by manipulating the vfolder parameter (dot-dot sequence). This is a file-read impact, enabling access to portions of the server’s filesystem. The ...