Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

CVE-2014-7260

The Server Side Includes (SSI) implementation in the File Upload BBS component in ULTRAPOP.JP i-HTTPD allows remote attackers to execute arbitrary commands by uploading files containing commands in SSI directives.

CVSS 2.0 · 7.5 High EPSS 2.1% KEV · Not listed
Vendors
Ultrapop
Products
I-httpd
CVE-2014-7263

Cross-site scripting (XSS) vulnerability in ULTRAPOP.JP i-HTTPD allows remote attackers to inject arbitrary web script or HTML via a crafted HTTP header, a different vulnerability than CVE-2014-7261.

CVSS 2.0 · 4.3 Medium EPSS 1.5% KEV · Not listed
Vendors
Ultrapop
Products
I-httpd
CVE-2014-7261

Cross-site scripting (XSS) vulnerability in ULTRAPOP.JP i-HTTPD allows remote attackers to inject arbitrary web script or HTML via a crafted string that is improperly rendered during construction of a directory index page, a different vulnerability than CVE-2014-7263.

CVSS 2.0 · 4.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Ultrapop
Products
I-httpd
CVE-2014-7262

Cross-site scripting (XSS) vulnerability in the Omake BBS component in ULTRAPOP.JP i-HTTPD allows remote attackers to inject arbitrary web script or HTML via a crafted string.

CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed
Vendors
Ultrapop
Products
I-httpd