Vendorsefssofteasy_file_sharing_web_serverall versions
Vulnerabilities

efssoft Easy File Sharing (EFS) Web Server

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2014-3791
Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 6.8 allows remote attackers to execute arbitrary code via a long string in a cookie UserID parameter to vfolder.ghp.
Published 2014-05-20 · Modified
10.01 PoCEPSS 0.787
CVE-2014-5178
Multiple cross-site scripting (XSS) vulnerabilities in Easy File Sharing (EFS) Web Server 6.8 allow remote authenticated users to inject arbitrary web script or HTML via the content parameter when (1) creating a topic or (2) posting an answer. NOTE: some of these details are obtained from third party information.
Published 2014-08-06 · Modified
4.3EPSS 0.018
CVE-2014-9439
Cross-site scripting (XSS) vulnerability in Easy File Sharing Web Server 6.8 allows remote attackers to inject arbitrary web script or HTML via the username field during registration, which is not properly handled by forum.ghp.
Published 2015-01-02 · Modified
4.31 PoCEPSS 0.015