Localweb2000
CVEs (3)
| CVE | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2002-0897 | 0.03 | — | 0.03 | Oct 4, 2002 | LocalWEB2000 2.1.0 web server allows remote attackers to bypass access restrictions for restricted files via a URL that contains the "/./" directory. | ||
| CVE-2001-0189 | 0.03 | — | 0.04 | Mar 26, 2001 | Directory traversal vulnerability in LocalWEB2000 HTTP server allows remote attackers to read arbitrary commands via a .. (dot dot) attack in an HTTP GET request. | ||
| CVE-2002-1353 | 0.00 | — | 0.00 | Aug 29, 2002 | LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtain the passwords via a direct request to users.lst. |
- CVE-2002-0897Oct 4, 2002risk 0.03cvss —epss 0.03
LocalWEB2000 2.1.0 web server allows remote attackers to bypass access restrictions for restricted files via a URL that contains the "/./" directory.
- CVE-2001-0189Mar 26, 2001risk 0.03cvss —epss 0.04
Directory traversal vulnerability in LocalWEB2000 HTTP server allows remote attackers to read arbitrary commands via a .. (dot dot) attack in an HTTP GET request.
- CVE-2002-1353Aug 29, 2002risk 0.00cvss —epss 0.00
LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtain the passwords via a direct request to users.lst.