Pico Server Security Vulnerabilities and Issues — Pico Server CVE List

Lucene search

Pico ServerPico Server

3 matches found

CVE•added 2005/05/16 4:0 a.m.•41 views

CVE-2005-1365

Pico Server (pServ) 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leading "/" (slash) characters and ".." sequences.

10CVSS7.6AI score0.07343EPSS

CVE•added 2005/05/16 4:0 a.m.•33 views

CVE-2005-1366

Pico Server (pServ) 3.2 and earlier allows remote attackers to obtain the source code for CGI scripts via "dirname/../cgi-bin" in a URL.

7.5CVSS6.8AI score0.04734EPSS

CVE•added 2005/05/16 4:0 a.m.•31 views

CVE-2005-1367

Pico Server (pServ) 3.2 and earlier allows local users to read arbitrary files as the pServ user via a symlink to a file outside of the web document root.

7.5CVSS6.3AI score0.00415EPSS