Show filters
16 Total Results
Displaying 1-10 of 16
Sort by:
Attacker Value
Unknown
CVE-2017-18377
Disclosure Date: June 11, 2019 (last updated November 27, 2024)
An issue was discovered on Wireless IP Camera (P2P) WIFICAM cameras. There is Command Injection in the set_ftp.cgi script via shell metacharacters in the pwd variable, as demonstrated by a set_ftp.cgi?svr=192.168.1.1&port=21&user=ftp URI.
0
Attacker Value
Unknown
CVE-2009-5111
Disclosure Date: December 27, 2011 (last updated October 04, 2023)
GoAhead WebServer allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris.
0
Attacker Value
Unknown
CVE-2011-4273
Disclosure Date: November 03, 2011 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in GoAhead Webserver 2.18 allow remote attackers to inject arbitrary web script or HTML via (1) the group parameter to goform/AddGroup, related to addgroup.asp; (2) the url parameter to goform/AddAccessLimit, related to addlimit.asp; or the (3) user (aka User ID) or (4) group parameter to goform/AddUser, related to adduser.asp.
0
Attacker Value
Unknown
CVE-2002-2428
Disclosure Date: February 06, 2009 (last updated October 04, 2023)
webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an HTTP POST request that contains a Content-Length header but no body data.
0
Attacker Value
Unknown
CVE-2003-1568
Disclosure Date: February 06, 2009 (last updated October 04, 2023)
GoAhead WebServer before 2.1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an invalid URL, related to the websSafeUrl function.
0
Attacker Value
Unknown
CVE-2003-1569
Disclosure Date: February 06, 2009 (last updated October 04, 2023)
GoAhead WebServer before 2.1.5 on Windows 95, 98, and ME allows remote attackers to cause a denial of service (daemon crash) via an HTTP request with a (1) con, (2) nul, (3) clock$, or (4) config$ device name in a path component, different vectors than CVE-2001-0385.
0
Attacker Value
Unknown
CVE-2002-2430
Disclosure Date: February 06, 2009 (last updated October 04, 2023)
GoAhead WebServer before 2.1.1 allows remote attackers to cause a denial of service (CPU consumption) by performing a socket disconnect to terminate a request before it has been fully processed by the server.
0
Attacker Value
Unknown
CVE-2002-2427
Disclosure Date: February 06, 2009 (last updated October 04, 2023)
The security handler in GoAhead WebServer before 2.1.1 allows remote attackers to bypass authentication and obtain access to protected web content via "an extra slash in a URL," a different vulnerability than CVE-2002-1603.
0
Attacker Value
Unknown
CVE-2002-2429
Disclosure Date: February 06, 2009 (last updated October 04, 2023)
webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (daemon crash) via an HTTP POST request that contains a negative integer in the Content-Length header.
0
Attacker Value
Unknown
CVE-2002-2431
Disclosure Date: February 06, 2009 (last updated October 04, 2023)
Unspecified vulnerability in GoAhead WebServer before 2.1.4 allows remote attackers to cause "incorrect behavior" via unknown "malicious code," related to incorrect use of the socketInputBuffered function by sockGen.c.
0
