Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via the (1) "Name" or (2) "E-mail" parameters.
Product
summit computer networks lil http server vulnerabilities
3 published CVES affecting summit computer networks lil http server, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 3
- Critical
- 0
- High
- 2
- Medium
- 1
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest summit computer networks lil http server CVEs
Newest publication first
-
HighCVSS 7.5 EPSS 7.0% Public exploit
-
HighCVSS 7.5 EPSS 7.1% Public exploit
Cross-site scripting vulnerability in PowerBASIC urlcount.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via a request to urlcount.cgi that contains the script, which is not filtered when the REPORT capabili...
-
MediumCVSS 5.0 EPSS 1.5%
Lil HTTP Server 2.1 allows remote attackers to read password-protected files via a /./ in the HTTP request.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.