Vulnerabilities

TI-2009-02244 CVE-2009-2354 · GHSA-hm7r-j6jm-9r7p

SQL injection vulnerability in the auth_checkpass function in the login page in NullLogic…

LOW 35

SQL injection vulnerability in the auth_checkpass function in the login page in NullLogic Groupware 1.2.7 allows remote attackers to execute arbitrary SQL commands via the username parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01051 Published 2009-07-07 No fix listed CWE-89

TI-2002-01419 CVE-2002-1497 · GHSA-jrfw-cw22-5m95

Cross-site scripting (XSS) vulnerability in Null HTTP Server 0.5.0 and earlier allows…

LOW 23

Cross-site scripting (XSS) vulnerability in Null HTTP Server 0.5.0 and earlier allows remote attackers to insert arbitrary HTML into a "404 Not Found" response.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01685 Published 2004-09-01 No fix listed

TI-2002-01418 CVE-2002-1496 · GHSA-6mwf-gqgc-72xc

Heap-based buffer overflow in Null HTTP Server 0.5.0 and earlier allows remote attackers…

MEDIUM 53

Heap-based buffer overflow in Null HTTP Server 0.5.0 and earlier allows remote attackers to execute arbitrary code via a negative value in the Content-Length HTTP header.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.22527 Published 2004-09-01 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in the auth_checkpass function in the login page in NullLogic…

Cross-site scripting (XSS) vulnerability in Null HTTP Server 0.5.0 and earlier allows…

Heap-based buffer overflow in Null HTTP Server 0.5.0 and earlier allows remote attackers…