CVE-2018-12684

Out-of-bounds Read in the sendssifile function in civetweb.c in CivetWeb through 1.10 allows attackers to cause a Denial of Service or Information Disclosure via a crafted SSI file...

PT-2018-11329

Name of the Vulnerable Software and Affected Versions CivetWeb versions prior to 1.11 Description The issue is related to an out-of-bounds read in the send ssi file function, which can be triggered by a crafted SSI file. This can lead to a Denial of Service or Information Disclosure...