Sharing-File Easy File Sharing Web Server vulnerabilities

CVE-2018-9059 [CRITICAL] CVE-2018-9059: Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 7.2 allows remote attackers to exe Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 7.2 allows remote attackers to execute arbitrary code via a malicious login request to forum.ghp. NOTE: this may overlap CVE-2014-3791.

CVE-2018-18912 [CRITICAL] CWE-787 CVE-2018-18912: An issue was discovered in Easy File Sharing (EFS) Web Server 7.2. A stack-based buffer overflow vul An issue was discovered in Easy File Sharing (EFS) Web Server 7.2. A stack-based buffer overflow vulnerability occurs when a malicious POST request has been made to forum.ghp upon creating a new topic in the forums, which allows remote attackers to execute arbitrary code.

CVE-2009-4809 [MEDIUM] CWE-22 CVE-2009-4809: Directory traversal vulnerability in thumbnail.ghp in Easy File Sharing (EFS) Web Server 4.8 allows Directory traversal vulnerability in thumbnail.ghp in Easy File Sharing (EFS) Web Server 4.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the vfolder parameter.

CVE-2019-25466 [HIGH] CWE-787 CVE-2019-25466: Easy File Sharing Web Server 7.2 contains a local structured exception handling buffer overflow vuln Easy File Sharing Web Server 7.2 contains a local structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by creating a malicious username. Attackers can craft a username with a payload containing 4059 bytes of padding followed by a nseh value and seh pointer to trigger the overflow when adding