CVE-2007-5654

LiteSpeed Web Server prior to 3.2.4 is affected by CVE-2007-5654 (Mime Type Injection). An attacker can trigger use of an arbitrary MIME type for a file by sending a request containing a null-byte sequence (%00.) followed by a new extension, which can lead to viewing sensitive content (e.g., read...

CVE-2007-5654: Exposure of Sensitive Information to an Unauthorized Actor

LiteSpeed Web Server before 3.2.4 allows remote attackers to trigger use of an arbitrary MIME type for a file via a "%00." sequence followed by a new extension, as demonstrated by reading PHP source code via requests for .php%00.txt files, aka "Mime Type Injection."...

CVE-2005-3695

Cross-site scripting XSS vulnerability in admin/config/confMgr.php in LiteSpeed Web Server 2.1.5 allows remote attackers to inject arbitrary web script or HTML via the m parameter...

CVE-2005-3695

LiteSpeed Web Server 2.1.5 is reported to be vulnerable to a reflected cross-site scripting (XSS) flaw in admin/config/confMgr.php via the m parameter. The description indicates an arbitrary script/HTML could be injected by remote attackers, but the provided documents do not specify affected vers...

CVE-2005-3695: Undefined Security Weakness

Cross-site scripting XSS vulnerability in admin/config/confMgr.php in LiteSpeed Web Server 2.1.5 allows remote attackers to inject arbitrary web script or HTML via the m parameter...

Litespeed 2.1.5 - ConfMgr.php Cross-Site Scripting

Litespeed 2.1.5 - ConfMgr.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15485/info LiteSpeed Web Server is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this...