Code injection

WebSpeed 3.x in OpenEdge 10.x in Progress Software Progress 9.1e, and certain other 9.x versions, allows remote attackers to cause a denial of service infinite loop and daemon hang via a messenger URL that invokes edit.r with no additional parameters, as demonstrated by requests for cgiip.exe or...

CVE-2000-0127

The Webspeed configuration program does not properly disable access to the WSMadmin utility, which allows remote attackers to gain privileges via wsisa.dll...

CVE-2000-0127

CVE-2000-0127 affects Webspeed: the configuration program fails to disable access to the WSMadmin utility, enabling remote attackers to gain privileges via wsisa.dll. The vulnerability is triggered by unauthenticated access to the WSMadmin component, potentially allowing an attacker to take contr...