Bajie
Bajie Java Http Server: vulnerabilidades y CVE
Bajie Java Http Server tiene 6 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE6
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2003-1511 | Media (4.3) | 3.6% | — | 31 dic 2003 | Cross-site scripting (XSS) vulnerability in Bajie Java HTTP Server 0.95 through 0.95zxv4 allows remote attackers to inject arbitrary web script or HTML via (1) the query string to test.txt, (2) the guestName parameter… |
| CVE-2003-1543 | Media (4.3) | 2.0% | — | 31 dic 2003 | Cross-site scripting (XSS) vulnerability in Bajie Http Web Server 0.95zxe, 0.95zxc, and possibly others, allows remote attackers to inject arbitrary web script or HTML via the query string, which is reflected in an… |
| CVE-2001-0308 | Alta (7.5) | 3.7% | — | 3 may 2001 | UploadServlet in Bajie HTTP JServer 0.78, and possibly other versions before 0.80, allows remote attackers to execute arbitrary commands by calling the servlet to upload a program, then using a ... (modified ..) to… |
| CVE-2001-0307 | Alta (7.5) | 7.9% | — | 3 may 2001 | Bajie HTTP JServer 0.78, and other versions before 0.80, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request for a CGI program that does not exist. |
| CVE-2000-0774 | Media (5) | 1.5% | — | 20 oct 2000 | The sample Java servlet "test" in Bajie HTTP web server 0.30a reveals the real pathname of the web document root. |
| CVE-2000-0773 | Media (5) | 1.9% | — | 20 oct 2000 | Bajie HTTP web server 0.30a allows remote attackers to read arbitrary files via a URL that contains a "....", a variant of the dot dot directory traversal attack. |