LiteSpeed Web Server 'httpreq.cpp' Denial of Service Vulnerability

LiteSpeed Web Server is a high-performance web server from LiteSpeed, Inc. The server can be used interchangeably with Apache and can handle thousands of concurrent connections with a small memory footprint. A denial of service vulnerability exists in LiteSpeed Web Server 1.3.9 and earlier...

PT-2015-15: Information Disclosure in LiteSpeed Web Server

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in LiteSpeed Web Server. This vulnerability allows attackers to obtain the content of arbitrary memory locations in LiteSpeed Web Server. The exploitation of the vulnerability makes it possible t...

Litespeed Web Server 4.0.12 - (Add Admin) CSRF and XSS Vulnerabilities

No description provided by source. Author: d1dn0t didnotatmedotcom Software Link: http://www.litespeedtech.com/litespeed-web-server-downloads.html Version: 4.0.12 Greetz: Muts/Ryujin/KernelSaunders 0x00 Product Description LiteSpeed Web Server is the leading high-performance, high-scalability web...

LiteSpeed 2.1.5 ConfMgr.php Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15485/info LiteSpeed Web Server is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

CVE-2012-4871

Cross-site scripting XSS vulnerability in service/graphhtml.php in the administrator panel in LiteSpeed Web Server 4.1.11 allows remote attackers to inject arbitrary web script or HTML via the gtitle parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in service/graphhtml.php in the administrator panel in LiteSpeed Web Server 4.1.11 allows remote attackers to inject arbitrary web script or HTML via the gtitle parameter...

CVE-2012-4871

CVE-2012-4871 affects LiteSpeed Web Server 4.1.11, with an XSS in the administrator panel via the gtitle parameter of service/graph_html.php. The vulnerability allows remote attackers to inject arbitrary web scripts/HTML. Documents do not provide exploitation details or a confirmed patch; remedia...

CVE-2012-4871

Cross-site scripting XSS vulnerability in service/graphhtml.php in the administrator panel in LiteSpeed Web Server 4.1.11 allows remote attackers to inject arbitrary web script or HTML via the gtitle parameter...

PT-2012-5623 · Litespeed · Litespeed Web Server

Name of the Vulnerable Software and Affected Versions: LiteSpeed Web Server version 4.1.11 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the gtitle parameter in the administrator panel. Recommendations: For LiteSpeed Web...

Litespeed Web Server - gtitle Cross-Site Scripting

Litespeed Web Server - gtitle Cross-Site Scripting source: https://www.securityfocus.com/bid/55946/info LiteSpeed Web Server is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in t...

LiteSpeed Web Server 4.0.17 w/ PHP Remote Exploit for FreeBSD

LiteSpeed Web Server 4.0.17 w/ PHP Remote Exploit for FreeBSD bug discovered & exploited by Kingcope Dec 2010 Lame Xploit Tested with success on FreeBSD 8.0-RELEASE - LiteSpeed WebServer 4.0.17 Standard & Enterprise x86 FreeBSD 6.3-RELEASE - LiteSpeed WebServer 4.0.17 Standard & Enterprise x86...

LiteSpeed Web Server buffer overflow

Buffer overflow if PHP library is used...

LiteSpeed Web Server 4.0.17 w/ PHP Remote Exploit for FreeBSD

Exploit for freebsd platform in category remote exploits LiteSpeed Web Server 4.0.17 w/ PHP Remote Exploit for FreeBSD bug discovered & exploited by Kingcope Dec 2010 Lame Xploit Tested with success on FreeBSD 8.0-RELEASE - LiteSpeed WebServer 4.0.17 Standard & Enterprise x86 FreeBSD 6.3-RELEASE ...

Litespeed Web Server 4.0.17 with PHP (FreeBSD) - Remote Overflow

Litespeed Web Server 4.0.17 with PHP FreeBSD - Remote Overflow LiteSpeed Web Server 4.0.17 w/ PHP Remote Exploit for FreeBSD bug discovered & exploited by Kingcope Dec 2010 Lame Xploit Tested with success on FreeBSD 8.0-RELEASE - LiteSpeed WebServer 4.0.17 Standard & Enterprise x86 FreeBSD...

LiteSpeed Web Server 4.0.17 Remote Exploit

LiteSpeed Web Server 4.0.17 w/ PHP Remote Exploit for FreeBSD bug discovered & exploited by Kingcope Dec 2010 Lame Xploit Tested with success on FreeBSD 8.0-RELEASE - LiteSpeed WebServer 4.0.17 Standard & Enterprise x86 FreeBSD 6.3-RELEASE - LiteSpeed WebServer 4.0.17 Standard & Enterprise x86...

LiteSpeed Web Server Source Code Information Disclosure Vulnerability

LiteSpeed Web Server is prone to a vulnerability that lets attackers access source code files. An attacker can exploit this vulnerability to retrieve certain files from the vulnerable computer in the context of the webserver process. Information obtained may aid in further attacks. LiteSpeed Web...

LiteSpeed Web Server Source Code Information Disclosure

The installed version of the LiteSpeed web server software on the remote host returns the source of scripts hosted on it when a NULL byte and '.txt' is appended to the request URL. A remote attacker may be able to leverage this issue to view a file on the web server's source code and possibly...

litespeedsource-disclose.txt

LiteSpeed Web Server Remote Source Code Disclosure Exploit\n"; else $out = "GET /".$argv2."\x00.txt HTTP/1.1\r\n"; $out .= "Host: ".$argv1."\r\n"; $out .= "Connection: Close\r\n\r\n"; fwrite$fp, $out; while !feof$fp $gelen = fgets$fp, 128; $dosya = strreplace"/","-",$argv2; $ac =...

Litespeed Web Server 4.0.12 Cross Site Request Forgery / Cross Site Scripting

Exploit Title: Litespeed Web Server - Add Admin CSRF and XSS Vulnerabilities Date: 2010-02-04 Author: d1dn0t didnotatmedotcom Software Link: http://www.litespeedtech.com/litespeed-web-server-downloads.html Version: 4.0.12 Greetz: Muts/Ryujin/KernelSaunders 0x00 Product Description LiteSpeed Web...

Litespeed Web Server v4.0.12 (Add Admin) CSRF / XSS Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== Litespeed Web Server v4.0.12 Add Admin CSRF / XSS Vulnerabilities =================================================================== Author: d1dn0t Software Link:...