CVE-2007-5654

LiteSpeed Web Server prior to 3.2.4 is affected by CVE-2007-5654 (Mime Type Injection). An attacker can trigger use of an arbitrary MIME type for a file by sending a request containing a null-byte sequence (%00.) followed by a new extension, which can lead to viewing sensitive content (e.g., read...

CVE-2005-3695

LiteSpeed Web Server 2.1.5 is reported to be vulnerable to a reflected cross-site scripting (XSS) flaw in admin/config/confMgr.php via the m parameter. The description indicates an arbitrary script/HTML could be injected by remote attackers, but the provided documents do not specify affected vers...