Litespeed Web Server 4.0.12 - Cross-Site Request Forgery (Add Admin) / Cross-Site Scripting

Author: d1dn0t didnotatmedotcom Software Link: http://www.litespeedtech.com/litespeed-web-server-downloads.html Version: 4.0.12 Greetz: Muts/Ryujin/KernelSaunders 0x00 Product Description LiteSpeed Web Server is the leading high-performance, high-scalability web server. It is completely Apache...

Litespeed Web Server v4.0.12 (Add Admin) CSRF / XSS Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== Litespeed Web Server v4.0.12 Add Admin CSRF / XSS Vulnerabilities =================================================================== Author: d1dn0t Software Link:...

CVE-2007-5654

LiteSpeed Web Server before 3.2.4 allows remote attackers to trigger use of an arbitrary MIME type for a file via a "%00." sequence followed by a new extension, as demonstrated by reading PHP source code via requests for .php%00.txt files, aka "Mime Type Injection."...

Design/Logic Flaw

LiteSpeed Web Server before 3.2.4 allows remote attackers to trigger use of an arbitrary MIME type for a file via a "%00." sequence followed by a new extension, as demonstrated by reading PHP source code via requests for .php%00.txt files, aka "Mime Type Injection."...

CVE-2007-5654

LiteSpeed Web Server prior to 3.2.4 is affected by CVE-2007-5654 (Mime Type Injection). An attacker can trigger use of an arbitrary MIME type for a file by sending a request containing a null-byte sequence (%00.) followed by a new extension, which can lead to viewing sensitive content (e.g., read...

CVE-2005-3695

Cross-site scripting XSS vulnerability in admin/config/confMgr.php in LiteSpeed Web Server 2.1.5 allows remote attackers to inject arbitrary web script or HTML via the m parameter...

CVE-2005-3695

LiteSpeed Web Server 2.1.5 is reported to be vulnerable to a reflected cross-site scripting (XSS) flaw in admin/config/confMgr.php via the m parameter. The description indicates an arbitrary script/HTML could be injected by remote attackers, but the provided documents do not specify affected vers...

Litespeed 2.1.5 - ConfMgr.php Cross-Site Scripting

Litespeed 2.1.5 - ConfMgr.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15485/info LiteSpeed Web Server is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this...