Easy Address Book Web Server
Approved changes feed: RSS · Atom
cpe:2.3:a:efs_software:easy_address_book_web_server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Efs Software (22b29667-989b-5585-b334-41b6f57122e4) |
|---|---|
| Product | Easy Address Book Web Server (7ad8894f-2b5e-5269-b441-82e438adcc10) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-4493 |
vulnerable | 2026-06-08 06:16:12.751973 |
Easy Address Book Web Server Stored XSS vulnerability
MEDIUM (6.1)
Stored Cross-Site Scripting in Easy Address Book Web Server 1.6 version, through the users_admin.ghp file that affects multiple parameters such as (firstname, homephone, lastname, lastname, middlename, workaddress, workcity, workcountry, workphone, workstate, workzip). This vulnerability allows a remote attacker to store a malicious JavaScript payload in the application to be executed when the page is loaded, resulting in an integrity impact.
Published: 2023-10-04T12:24:02.393Z
Updated: 2024-09-05T18:10:09.264Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4492 |
vulnerable | 2026-06-08 06:16:12.751419 |
Easy Address Book Web Server XSS vulnerability
MEDIUM (6.1)
Vulnerability in Easy Address Book Web Server 1.6 version, affecting the parameters (firstname, homephone, lastname, middlename, workaddress, workcity, workcountry, workphone, workstate and workzip) of the /addrbook.ghp file, allowing an attacker to inject a JavaScript payload specially designed to run when the application is loaded
Published: 2023-10-04T12:19:44.181Z
Updated: 2024-09-05T18:10:37.307Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4491 |
vulnerable | 2026-06-08 06:16:12.749985 |
Easy Address Book Web Server Buffer overflow vulnerability
CRITICAL (9.8)
Buffer overflow vulnerability in Easy Address Book Web Server 1.6 version. The exploitation of this vulnerability could allow an attacker to send a very long username string to /searchbook.ghp, asking for the name via a POST request, resulting in arbitrary code execution on the remote machine.
Published: 2023-10-04T12:17:20.208Z
Updated: 2024-09-05T18:11:41.806Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.