Vulnerabilities

TI-2002-01995 CVE-2002-2076 · GHSA-whm8-6443-gw5v

Directory traversal vulnerability in Lil' HTTP server 2.1 and 2.2 allows remote attackers…

LOW 26

Directory traversal vulnerability in Lil' HTTP server 2.1 and 2.2 allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01815 Published 2005-07-14 No fix listed

TI-2002-00981 CVE-2002-1009 · GHSA-p3xh-qp8h-hq67

Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web…

MEDIUM 43

Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via the (1) "Name" or (2) "E-mail" parameters…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.07023 Published 2002-08-31 No fix listed

TI-2002-00980 CVE-2002-1008 · GHSA-ph29-776v-p2w9

Cross-site scripting vulnerability in PowerBASIC urlcount.cgi, as included in Lil' HTTP…

MEDIUM 43

Cross-site scripting vulnerability in PowerBASIC urlcount.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via a request to urlcount.cgi that contain…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.07099 Published 2002-08-31 No fix listed

TI-2002-00293 CVE-2002-0304 · GHSA-qjx4-9m3r-q6f4

Lil HTTP Server 2.1 allows remote attackers to read password-protected files via a /./ in the HTTP request.

LOW 26

Lil HTTP Server 2.1 allows remote attackers to read password-protected files via a /./ in the HTTP request.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01539 Published 2002-05-03 No fix listed

Vulnerabilities

Filters

Directory traversal vulnerability in Lil' HTTP server 2.1 and 2.2 allows remote attackers…

Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web…

Cross-site scripting vulnerability in PowerBASIC urlcount.cgi, as included in Lil' HTTP…

Lil HTTP Server 2.1 allows remote attackers to read password-protected files via a /./ in the HTTP request.