Gnome

Dwarf Http Server

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2006-0819

  • EPSS 1.12%
  • Published 13.03.2006 19:34:00
  • Last modified 03.04.2025 01:03:51

Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via (1) dot, (2) space, (3) slash, or (4) NULL characters in the filename extension of an HTTP request.

4.3

CVE-2006-0820

  • EPSS 0.61%
  • Published 13.03.2006 19:34:00
  • Last modified 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in Dwarf HTTP Server 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified error messages.