Total
6 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2003-1144 | 1 Perception | 1 Liteserve | 2024-11-20 | 10.0 HIGH | N/A |
Buffer overflow in the log viewing interface in Perception LiteServe 1.25 through 2.2 allows remote attackers to execute arbitrary code via a GET request with a long file name. | |||||
CVE-2002-2406 | 1 Perception | 1 Liteserve | 2024-11-20 | 5.0 MEDIUM | N/A |
Buffer overflow in HTTP server in LiteServe 2.0, 2.0.1 and 2.0.2 allows remote attackers to cause a denial of service (hang) via a large number of percent characters (%) in an HTTP GET request. | |||||
CVE-2002-2369 | 1 Perception | 1 Liteserve | 2024-11-20 | 5.0 MEDIUM | N/A |
Perception LiteServe 2.0 allows remote attackers to read password protected files via a leading "/./" in a URL. | |||||
CVE-2002-2192 | 1 Perception | 1 Liteserve | 2024-11-20 | 4.3 MEDIUM | N/A |
Cross-site scripting (XSS) vulnerability in Perception LiteServe 2.0.1 allows remote attackers to execute arbitrary web script via (1) a Host: header when DNS wildcards are supported or (2) the query string in a "dir" request to indexed folders. | |||||
CVE-2002-1986 | 1 Perception | 1 Liteserve | 2024-11-20 | 5.0 MEDIUM | N/A |
Perception LiteServe 2.0 through 2.0.1 allows remote attackers to obtain the source code of CGI scripts via an HTTP request with a trailing dot ("."). | |||||
CVE-2001-0795 | 1 Perception | 1 Liteserve | 2024-11-20 | 5.0 MEDIUM | 7.5 HIGH |
Perception LiteServe 1.25 allows remote attackers to obtain source code of CGI scripts via URLs that contain MS-DOS conventions such as (1) upper case letters or (2) 8.3 file names. |