Vulnerabilities

TI-2007-02913 CVE-2007-3009 · GHSA-g58w-3x65-p39p

Format string vulnerability in the MprLogToFile::logEvent function in Mbedthis AppWeb…

LOW 24

Format string vulnerability in the MprLogToFile::logEvent function in Mbedthis AppWeb 2.0.5-4, when the build supports logging but the configuration disables logging, allows remote attackers to cause a denial of service…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02231 Published 2007-06-04 No fix listed

TI-2007-02912 CVE-2007-3008 · GHSA-522h-48w5-75fm

Mbedthis AppWeb before 2.2.2 enables the HTTP TRACE method, which has unspecified impact…

LOW 23

Mbedthis AppWeb before 2.2.2 enables the HTTP TRACE method, which has unspecified impact probably related to remote information leaks and cross-site tracing (XST) attacks, a related issue to CVE-2004-2320 and CVE-2005-33…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01454 Published 2007-06-04 No fix listed CWE-200

TI-2004-02188 CVE-2004-2317 · GHSA-v76h-x8gq-77v4

Information leak in Mbedthis AppWeb HTTP server 1.0 through 1.1.2 allows remote attackers…

LOW 25

Information leak in Mbedthis AppWeb HTTP server 1.0 through 1.1.2 allows remote attackers to obtain sensitive information via a user message that is generated when Mbedthis denies access.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01181 Published 2005-08-16 No fix listed

TI-2004-02186 CVE-2004-2315 · GHSA-4frx-c5mx-vgf5

Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of…

LOW 26

Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service (crash) via an empty OPTIONS request.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01698 Published 2005-08-16 No fix listed

TI-2004-02085 CVE-2004-2213 · GHSA-7jpj-px3g-vq5r

Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to obtain the source…