CVE-2007-5265: Multiple format string vulnerabilities in websrv.cpp in Dawn of Time 1.69s beta4 and earlier allow remote attackers to execute arbitrary code via format string…

PriorityP346high7.5CVSS 2.0

AVNACLAuNCPIPAP

EXPLOIT

EPSS

5.33%

91.6th percentile

Multiple format string vulnerabilities in websrv.cpp in Dawn of Time 1.69s beta4 and earlier allow remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) password fields when accessing certain "restricted zones", which are not properly handled by the (a) processWebHeader and (b) filterWebRequest functions.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
dawnoftime	dawn_of_time	<= 1.69s_beta4	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.