3 matches found
Linux Distros Unpatched Vulnerability : CVE-2016-7903
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset address link vi...
CVE-2021-43437
In sourcecodetester Engineers Online Portal as of 10-21-21, an attacker can manipulate the Host header as seen by the web application and cause the application to behave in unexpected ways. Very often multiple websites are hosted on the same IP address. This is where the Host Header comes in. Thi...
PT-2019-11952
Name of the Vulnerable Software and Affected Versions Zyxel NAS 326 versions 5.21 and below Description The issue is related to an eval injection vulnerability in the Python web server routing. This allows a remote authenticated attacker to execute arbitrary code via the "tjp6jp6y4", "simZysh", a...