Vulnerabilities

TI-2002-02158 CVE-2002-2246 · GHSA-xvf5-q2pw-vpcx

Cross-site scripting (XSS) vulnerability in VisNetic Website before 3.5.15 allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in VisNetic Website before 3.5.15 allows remote attackers to inject arbitrary web script or HTML via the HTTP referer header (HTTP_REFERER) to a non-existent page, which is inject…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01499 Published 2007-10-14 No fix listed CWE-79

TI-2002-02153 CVE-2002-2241 · GHSA-fvgq-vmrp-gcc4

Buffer overflow in httpd32.exe in Deerfield VisNetic WebSite before 3.5.15 allows remote…

LOW 26

Buffer overflow in httpd32.exe in Deerfield VisNetic WebSite before 3.5.15 allows remote attackers to cause a denial of service (crash) via a long HTTP OPTIONS request.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01552 Published 2007-10-14 No fix listed CWE-399

TI-2003-00429 CVE-2003-0456 · GHSA-v54v-27r8-vpr7

VisNetic WebSite 3.5 allows remote attackers to obtain the full pathname of the server…

LOW 28

VisNetic WebSite 3.5 allows remote attackers to obtain the full pathname of the server via a request containing a folder that does not exist, which leaks the pathname in an error message, as demonstrated using _vti_bin/f…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02762 Published 2003-07-15 No fix listed CWE-200

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in VisNetic Website before 3.5.15 allows remote…

Buffer overflow in httpd32.exe in Deerfield VisNetic WebSite before 3.5.15 allows remote…

VisNetic WebSite 3.5 allows remote attackers to obtain the full pathname of the server…