Vulnerabilities

TI-2015-01311 CVE-2015-1445 · GHSA-8mj6-8866-c4f4

HTTP header injection in the httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30.

LOW 35

HTTP header injection in the httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01782 Published 2017-08-28 No fix listed CWE-113

TI-2015-01309 CVE-2015-1443 · GHSA-p4w2-ggrw-5m79

The httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30 allows remote attackers to execute arbitrary code.

MEDIUM 44

The httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30 allows remote attackers to execute arbitrary code.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.03494 Published 2017-08-28 No fix listed CWE-20

TI-2015-01310 CVE-2015-1444 · GHSA-2x96-f24f-x8xf

Multiple cross-site scripting (XSS) vulnerabilities in the web administration frontend in…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in the web administration frontend in the httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30 allow remote attackers to inject arbitrary web script or HTML v…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01423 Published 2015-02-06 No fix listed CWE-79

Vulnerabilities

Filters

HTTP header injection in the httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30.

The httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30 allows remote attackers to execute arbitrary code.

Multiple cross-site scripting (XSS) vulnerabilities in the web administration frontend in…