fli4l vulnerabilities

Products

• fli4l 3

Latest fli4l CVEs

Newest publication first

1. CVE-2015-1445 HTTP header injection in the httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30.

   Published 2017-08-28

   High·CVSS 7.2 EPSS 1.8%

   HTTP header injection in the httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30.

2. CVE-2015-1443 The httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30 allows remote attackers to execute arbitrary code.

   Published 2017-08-28

   High·CVSS 8.8 EPSS 3.5%

   The httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30 allows remote attackers to execute arbitrary code.

3. CVE-2015-1444 Multiple cross-site scripting (XSS) vulnerabilities in the web administration frontend in the httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30 allow remote attackers to inject arbitrary....

   Published 2015-02-06

   Medium·CVSS 4.3 EPSS 1.4%

   Multiple cross-site scripting (XSS) vulnerabilities in the web administration frontend in the httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30 allow remote attackers to inject arbitrary web script or HTML via the (1) conntrack.cgi, (2) index.cgi, (3) log_syslog.cgi,...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.