VYPR

Simple HTTPD

by Shttpd

CVEs (1)

  • CVE-2007-6405Dec 17, 2007
    risk 0.04cvss epss 0.03

    Sergey Lyubka Simple HTTPD (shttpd) 1.38 and earlier on Windows allows remote attackers to download arbitrary CGI programs or scripts via a URI with an appended (1) '+' character, (2) '.' character, (3) %2e sequence (hex-encoded dot), or (4) hex-encoded character greater than…