CVE-2012-4871

Cross-site scripting XSS vulnerability in service/graphhtml.php in the administrator panel in LiteSpeed Web Server 4.1.11 allows remote attackers to inject arbitrary web script or HTML via the gtitle parameter...

CVE-2012-4871

CVE-2012-4871 affects LiteSpeed Web Server 4.1.11, with an XSS in the administrator panel via the gtitle parameter of service/graph_html.php. The vulnerability allows remote attackers to inject arbitrary web scripts/HTML. Documents do not provide exploitation details or a confirmed patch; remedia...

CVE-2012-4871: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in service/graphhtml.php in the administrator panel in LiteSpeed Web Server 4.1.11 allows remote attackers to inject arbitrary web script or HTML via the gtitle parameter...

PT-2012-5623 · Litespeed · Litespeed Web Server

Name of the Vulnerable Software and Affected Versions: LiteSpeed Web Server version 4.1.11 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the gtitle parameter in the administrator panel. Recommendations: For LiteSpeed Web...

Litespeed Web Server - gtitle Cross-Site Scripting

Litespeed Web Server - gtitle Cross-Site Scripting source: https://www.securityfocus.com/bid/55946/info LiteSpeed Web Server is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in t...

LiteSpeed Web Server 4.0.17 w/ PHP Remote Exploit for FreeBSD

LiteSpeed Web Server 4.0.17 w/ PHP Remote Exploit for FreeBSD bug discovered & exploited by Kingcope Dec 2010 Lame Xploit Tested with success on FreeBSD 8.0-RELEASE - LiteSpeed WebServer 4.0.17 Standard & Enterprise x86 FreeBSD 6.3-RELEASE - LiteSpeed WebServer 4.0.17 Standard & Enterprise x86...

LiteSpeed Web Server buffer overflow

Buffer overflow if PHP library is used...

LiteSpeed Web Server 4.0.17 w/ PHP Remote Exploit for FreeBSD

Exploit for freebsd platform in category remote exploits LiteSpeed Web Server 4.0.17 w/ PHP Remote Exploit for FreeBSD bug discovered & exploited by Kingcope Dec 2010 Lame Xploit Tested with success on FreeBSD 8.0-RELEASE - LiteSpeed WebServer 4.0.17 Standard & Enterprise x86 FreeBSD 6.3-RELEASE ...

Litespeed Web Server 4.0.17 with PHP (FreeBSD) - Remote Overflow

Litespeed Web Server 4.0.17 with PHP FreeBSD - Remote Overflow LiteSpeed Web Server 4.0.17 w/ PHP Remote Exploit for FreeBSD bug discovered & exploited by Kingcope Dec 2010 Lame Xploit Tested with success on FreeBSD 8.0-RELEASE - LiteSpeed WebServer 4.0.17 Standard & Enterprise x86 FreeBSD...

LiteSpeed Web Server 4.0.17 Remote Exploit

LiteSpeed Web Server 4.0.17 w/ PHP Remote Exploit for FreeBSD bug discovered & exploited by Kingcope Dec 2010 Lame Xploit Tested with success on FreeBSD 8.0-RELEASE - LiteSpeed WebServer 4.0.17 Standard & Enterprise x86 FreeBSD 6.3-RELEASE - LiteSpeed WebServer 4.0.17 Standard & Enterprise x86...

LiteSpeed Web Server Source Code Information Disclosure Vulnerability

LiteSpeed Web Server is prone to a vulnerability that lets attackers access source code files. An attacker can exploit this vulnerability to retrieve certain files from the vulnerable computer in the context of the webserver process. Information obtained may aid in further attacks. LiteSpeed Web...

LiteSpeed Web Server Source Code Information Disclosure

The installed version of the LiteSpeed web server software on the remote host returns the source of scripts hosted on it when a NULL byte and '.txt' is appended to the request URL. A remote attacker may be able to leverage this issue to view a file on the web server's source code and possibly...

litespeedsource-disclose.txt

LiteSpeed Web Server Remote Source Code Disclosure Exploit\n"; else $out = "GET /".$argv2."\x00.txt HTTP/1.1\r\n"; $out .= "Host: ".$argv1."\r\n"; $out .= "Connection: Close\r\n\r\n"; fwrite$fp, $out; while !feof$fp $gelen = fgets$fp, 128; $dosya = strreplace"/","-",$argv2; $ac =...

CVE-2010-2333: Exposure of Sensitive Information to an Unauthorized Actor

LiteSpeed Technologies LiteSpeed Web Server 4.0.x before 4.0.15 allows remote attackers to read the source code of scripts via an HTTP request with a null byte followed by a .txt file extension...

Litespeed Web Server 4.0.12 Cross Site Request Forgery / Cross Site Scripting

Exploit Title: Litespeed Web Server - Add Admin CSRF and XSS Vulnerabilities Date: 2010-02-04 Author: d1dn0t didnotatmedotcom Software Link: http://www.litespeedtech.com/litespeed-web-server-downloads.html Version: 4.0.12 Greetz: Muts/Ryujin/KernelSaunders 0x00 Product Description LiteSpeed Web...

Litespeed Web Server v4.0.12 (Add Admin) CSRF / XSS Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== Litespeed Web Server v4.0.12 Add Admin CSRF / XSS Vulnerabilities =================================================================== Author: d1dn0t Software Link:...

Litespeed Web Server 4.0.12 - Cross-Site Request Forgery (Add Admin) Cross-Site Scripting

Litespeed Web Server 4.0.12 - Cross-Site Request Forgery Add Admin Cross-Site Scripting Author: d1dn0t didnotatmedotcom Software Link: http://www.litespeedtech.com/litespeed-web-server-downloads.html Version: 4.0.12 Greetz: Muts/Ryujin/KernelSaunders 0x00 Product Description LiteSpeed Web Server ...

Litespeed Web Server 4.0.12 - Cross-Site Request Forgery (Add Admin) / Cross-Site Scripting

Author: d1dn0t didnotatmedotcom Software Link: http://www.litespeedtech.com/litespeed-web-server-downloads.html Version: 4.0.12 Greetz: Muts/Ryujin/KernelSaunders 0x00 Product Description LiteSpeed Web Server is the leading high-performance, high-scalability web server. It is completely Apache...

Design/Logic Flaw

LiteSpeed Web Server before 3.2.4 allows remote attackers to trigger use of an arbitrary MIME type for a file via a "%00." sequence followed by a new extension, as demonstrated by reading PHP source code via requests for .php%00.txt files, aka "Mime Type Injection."...

CVE-2007-5654

LiteSpeed Web Server before 3.2.4 allows remote attackers to trigger use of an arbitrary MIME type for a file via a "%00." sequence followed by a new extension, as demonstrated by reading PHP source code via requests for .php%00.txt files, aka "Mime Type Injection."...