Filtered by vendor Sharing-file Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2019-25466 1 Sharing-file 1 Easy File Sharing Web Server 2026-03-12 8.4 High
Easy File Sharing Web Server 7.2 contains a local structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by creating a malicious username. Attackers can craft a username with a payload containing 4059 bytes of padding followed by a nseh value and seh pointer to trigger the overflow when adding a new user account.
CVE-2009-4809 1 Sharing-file 1 Easy File Sharing Web Server 2025-04-11 N/A
Directory traversal vulnerability in thumbnail.ghp in Easy File Sharing (EFS) Web Server 4.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the vfolder parameter.
CVE-2018-9059 1 Sharing-file 1 Easy File Sharing Web Server 2024-11-21 N/A
Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 7.2 allows remote attackers to execute arbitrary code via a malicious login request to forum.ghp. NOTE: this may overlap CVE-2014-3791.
CVE-2018-18912 1 Sharing-file 1 Easy File Sharing Web Server 2024-11-21 N/A
An issue was discovered in Easy File Sharing (EFS) Web Server 7.2. A stack-based buffer overflow vulnerability occurs when a malicious POST request has been made to forum.ghp upon creating a new topic in the forums, which allows remote attackers to execute arbitrary code.