3 matches found
CVE-2024-28033
OS command injection vulnerability exists in WebProxy 1.7.8 and 1.7.9, which may allow a remote unauthenticated attacker to execute an arbitrary OS command with the privilege of the running web server. Note that the developer was unreachable, therefore, users should consider stop using WebProxy...
CVE-2024-28033
OS command injection vulnerability exists in WebProxy 1.7.8 and 1.7.9, which may allow a remote unauthenticated attacker to execute an arbitrary OS command with the privilege of the running web server. Note that the developer was unreachable, therefore, users should consider stop using WebProxy...
CVE-2008-3255
The connected documents confirm a cross-site scripting (XSS) vulnerability in WebProxy from LunarNight Laboratory, affecting versions 1.7.8 and earlier. The flaw allows an attacker to inject arbitrary scripts, potentially executing in a user’s browser. No exploitation details are provided beyond ...