LocalWEB2000
by LocalWEB2000
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2001-0189 | 0.04 | — | 0.08 | Mar 26, 2001 | Directory traversal vulnerability in LocalWEB2000 HTTP server allows remote attackers to read arbitrary commands via a .. (dot dot) attack in an HTTP GET request. | |||
| CVE-2002-0897 | 0.03 | — | 0.03 | Oct 4, 2002 | LocalWEB2000 2.1.0 web server allows remote attackers to bypass access restrictions for restricted files via a URL that contains the "/./" directory. | |||
| CVE-2002-1353 | 0.00 | — | 0.01 | Aug 29, 2002 | LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtain the passwords via a direct request to users.lst. |
- CVE-2001-0189Mar 26, 2001risk 0.04cvss —epss 0.08
Directory traversal vulnerability in LocalWEB2000 HTTP server allows remote attackers to read arbitrary commands via a .. (dot dot) attack in an HTTP GET request.
- CVE-2002-0897Oct 4, 2002risk 0.03cvss —epss 0.03
LocalWEB2000 2.1.0 web server allows remote attackers to bypass access restrictions for restricted files via a URL that contains the "/./" directory.
- CVE-2002-1353Aug 29, 2002risk 0.00cvss —epss 0.01
LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtain the passwords via a direct request to users.lst.