Bajie Java Http Server vulnerabilities
6 known vulnerabilities affecting bajie/java_http_server.
Total CVEs
6
CISA KEV
0
Public exploits
3
Exploited in wild
0
Severity breakdown
HIGH2MEDIUM4
Vulnerabilities
Page 1 of 1
CVE-2001-0307P3HIGHCVSS 7.5PoC≤ 0.792001-05-03
CVE-2001-0307 [HIGH] CWE-94 CVE-2001-0307: Bajie HTTP JServer 0.78, and other versions before 0.80, allows remote attackers to execute arbitrar
Bajie HTTP JServer 0.78, and other versions before 0.80, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request for a CGI program that does not exist.
nvd
CVE-2001-0308P4HIGHCVSS 7.5PoC≤ 0.792001-05-03
CVE-2001-0308 [HIGH] CWE-94 CVE-2001-0308: UploadServlet in Bajie HTTP JServer 0.78, and possibly other versions before 0.80, allows remote att
UploadServlet in Bajie HTTP JServer 0.78, and possibly other versions before 0.80, allows remote attackers to execute arbitrary commands by calling the servlet to upload a program, then using a ... (modified ..) to access the file that was created for the program.
nvd
CVE-2003-1511P4MEDIUMCVSS 4.3PoCv0.952003-12-31
CVE-2003-1511 [MEDIUM] CWE-79 CVE-2003-1511: Cross-site scripting (XSS) vulnerability in Bajie Java HTTP Server 0.95 through 0.95zxv4 allows remo
Cross-site scripting (XSS) vulnerability in Bajie Java HTTP Server 0.95 through 0.95zxv4 allows remote attackers to inject arbitrary web script or HTML via (1) the query string to test.txt, (2) the guestName parameter to the custMsg servlet, or (3) the cookiename parameter to the CookieExample servlet.
nvd
CVE-2000-0773P4MEDIUMCVSS 5.0v1.02000-10-20
CVE-2000-0773 [MEDIUM] CVE-2000-0773: Bajie HTTP web server 0.30a allows remote attackers to read arbitrary files via a URL that contains
Bajie HTTP web server 0.30a allows remote attackers to read arbitrary files via a URL that contains a "....", a variant of the dot dot directory traversal attack.
nvd
CVE-2003-1543P4MEDIUMCVSS 4.3v0.952003-12-31
CVE-2003-1543 [MEDIUM] CWE-79 CVE-2003-1543: Cross-site scripting (XSS) vulnerability in Bajie Http Web Server 0.95zxe, 0.95zxc, and possibly oth
Cross-site scripting (XSS) vulnerability in Bajie Http Web Server 0.95zxe, 0.95zxc, and possibly others, allows remote attackers to inject arbitrary web script or HTML via the query string, which is reflected in an error message.
nvd
CVE-2000-0774P4MEDIUMCVSS 5.0v1.02000-10-20
CVE-2000-0774 [MEDIUM] CVE-2000-0774: The sample Java servlet "test" in Bajie HTTP web server 0.30a reveals the real pathname of the web d
The sample Java servlet "test" in Bajie HTTP web server 0.30a reveals the real pathname of the web document root.
nvd