CVE-2022-0073 Authenticated Remote Code Execution in OpenLiteSpeed Web Server

Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0 versions before 1.7.16.1...

CVE-2022-0073

Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0 versions before 1.7.16.1...

CVE-2022-0073 Authenticated Remote Code Execution in OpenLiteSpeed Web Server

Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0 versions before 1.7.16.1...

CVE-2022-0073 Authenticated Remote Code Execution in OpenLiteSpeed Web Server

Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0 versions before 1.7.16.1...

CVE-2022-0072

CVE-2022-0072 is a Directory Traversal vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards. Affected open-source and enterprise variants include OpenLiteSpeed/Web Server dashboards versions 1.5.11–1.5.12, 1.6.5–1.6.20.1, and 1.7.0–1.7.16.x; and Lit...

CVE-2022-0072

Directory Traversal vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Path Traversal. This affects versions from 1.5.11 through 1.5.12, from 1.6.5 through 1.6.20.1, from 1.7.0 before 1.7.16.1...

CVE-2022-0072 Directory Traversal in OpenLiteSpeed Web Server

Directory Traversal vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Path Traversal. This affects versions from 1.5.11 through 1.5.12, from 1.6.5 through 1.6.20.1, from 1.7.0 before 1.7.16.1...

Litespeed Technologie OpenLiteSpeed 路径遍历漏洞

Litespeed Technologie OpenLiteSpeed is an open source web server from Litespeed Technologie. A path traversal vulnerability exists in Litespeed Technologie OpenLiteSpeed, which stems from its Web Server Dashboard that allows an attacker to implement path traversal. The following versions are...

InHand Networks InRouter302 安全漏洞

The InHand Networks InRouter302 is an LTE cellular router from InHand Networks USA. A security vulnerability exists in the InHand Networks InRouter302 version V3.5.45, which stems from a remaining debug code vulnerability in the httpd port 4444 upload.cgi function...

CVE-2022-0074

Untrusted Search Path vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server Container allows Privilege Escalation. This affects versions from 1.6.15 before 1.7.16.1. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Valu...

Litespeed Technologie OpenLiteSpeed 代码问题漏洞

Litespeed Technologie OpenLiteSpeed is an open source web server from Litespeed Technologie. A code issue vulnerability exists in LiteSpeed Technologies OpenLiteSpeed versions prior to 1.6.15 through 1.7.16.1, which stems from its Web Server Container allowing untrusted path searches leading to a...

CVE-2022-0072: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Path Traversal. This affects versions from 1.5.11 through 1.5.12, from 1.6.5 through 1.6.20.1, from 1.7.0 before 1.7.16.1...

LiteSpeed Technologies OpenLiteSpeed 输入验证错误漏洞

Litespeed Technologie OpenLiteSpeed is an open source web server from Litespeed Technologie. LiteSpeed Technologies OpenLiteSpeed version 1.7.x prior to 1.7.16.1 suffers from an Input Validation Error vulnerability that stems from insecure input validation in its Web Server Dashboard allowing an...

PT-2022-6273

Name of the Vulnerable Software and Affected Versions OpenLiteSpeed Web Server versions 1.6.15 through 1.7.16.1 LiteSpeed Web Server Container versions 1.6.15 through 1.7.16.1 Description The issue is related to an Untrusted Search Path vulnerability in LiteSpeed Technologies OpenLiteSpeed Web...

CVE-2022-0073: Improper Input Validation

Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0 versions before 1.7.16.1...

PT-2022-6246

Name of the Vulnerable Software and Affected Versions OpenLiteSpeed Web Server versions 1.7.0 through 1.7.16.1 LiteSpeed Web Server versions 1.7.0 through 1.7.16.1 Description The issue is related to improper input validation, which allows command injection. This can be exploited by a remote...

CVE-2022-0073

Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0 versions before 1.7.16.1. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2022-0074: Untrusted Search Path

Untrusted Search Path vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server Container allows Privilege Escalation. This affects versions from 1.6.15 before 1.7.16.1...

httpd: Out-of-bounds write in ap_escape_quotes() via malicious input

An out-of-bounds write in function apescapequotes of httpd allows an unauthenticated remote attacker to crash the server or potentially execute code on the system with the privileges of the httpd user, by providing malicious input to the function...

httpd: possible NULL dereference or SSRF in forward proxy configurations

There's a null pointer dereference and server-side request forgery flaw in httpd's modproxy module, when it is configured to be used as a forward proxy. A crafted packet could be sent on the adjacent network to the forward proxy that could cause a crash, or potentially SSRF via misdirected Unix...