OSVDB: Open Sourced Vulnerability Database

Creditee: Lorenzo Cantoni

Known Contact Information:

None at this time

Known Affiliations:

None at this time

Disclosed Vulnerabilities (7):

Disc. Date	OSVDB ID	CVEID	Title
2012-10-16	86784	2012-4750	Ezhometech EzServer memcpy() Function Crafted AMF Request Parsing Remote Memory Corruption DoS
2012-08-04	88835	2012-3872	Open Constructor users/users.php keyword Parameter XSS
2012-08-04	85131	2012-3873	Openconstructor CMS get_record() Function Multiple Page id Parameter SQL Injection
2012-08-04	88834	2012-3870	Open Constructor objects/createobject.php Multiple Parameter XSS
2012-08-04	88833	2012-3871	Open Constructor data/hybrid/i_hybrid.php header Parameter XSS
2012-08-04	88832	2012-3872	Open Constructor data/file/edit.php result Parameter XSS
2012-08-04	88831	2012-3872	Open Constructor confirm.php q Parameter XSS

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.