Soft3304 04webserver
9 CVEs affecting Soft3304 04webserver. Latest disclosed: 2006-08-17. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2006-4200 | | 2006-08-17 | Unspecified vulnerability in 04WebServer 1.83 and earlier allows remote attackers to bypass user authentication via unspecified vectors related to request proc… | |
CVE-2006-4199 | | 2006-08-17 | Cross-site scripting (XSS) vulnerability in Soft3304 04WebServer 1.83 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL, w… | |
CVE-2005-1416 | | 2005-05-03 | Directory traversal vulnerability in 04WebServer 1.81 allows remote attackers to read files outside of the web root but within the installation folder. | |
CVE-2004-2662 | | 2004-12-31 | Soft3304 04WebServer before 1.41 allows remote attackers to cause a denial of service (resource consumption or crash) via certain data related to OpenSSL, whic… | |
CVE-2004-2661 | | 2004-12-31 | Soft3304 04WebServer before 1.41 does not properly check file names, which allows remote attackers to obtain sensitive information (CGI source code). | |
CVE-2004-1514 | | 2004-12-31 | 04WebServer 1.42 allows remote attackers to cause a denial of service (fail to restart properly) via an HTTP request for an MS-DOS device name such as COM2. | |
CVE-2004-1513 | | 2004-12-31 | 04WebServer 1.42 does not adequately filter data that is written to log files, which could allow remote attackers to inject carriage return characters into the… | |
CVE-2004-1512 | | 2004-12-31 | Cross-site scripting (XSS) vulnerability in Response_default.html in 04WebServer 1.42 allows remote attackers to execute arbitrary web script or HTML via scrip… | |
CVE-2002-2216 | | 2002-12-31 | Soft3304 04WebServer before 1.20 does not properly process URL strings, which allows remote attackers to obtain unspecified sensitive information. |