RSS   Vulnerabilities for 'Kf web server'   RSS

2007-06-26
 
CVE-2007-3396

CWE-Other
 

 
Cross-site scripting (XSS) vulnerability in index.wkf in KeyFocus (KF) web server 3.1.0 allows remote attackers to inject arbitrary web script or HTML via the opsubmenu parameter.

 
2002-12-31
 
CVE-2002-2403

 

 
Directory traversal vulnerability in KeyFocus web server 1.0.8 allows remote attackers to read arbitrary files for recognized MIME type files via "...", "....", ".....", and other multiple dot sequences.

 
2002-10-04
 
CVE-2002-1032

 

 
Buffer overflow in KeyFocus (KF) web server 1.0.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed HTTP header.

 
 
CVE-2002-1031

 

 
KeyFocus (KF) web server 1.0.2 allows remote attackers to list directories and read restricted files via an HTTP request containing a %00 (null) character.

 


Copyright 2024, cxsecurity.com

 

Back to Top