Cross-site scripting (XSS) vulnerability in Zeus Administration Server in Zeus Web Server 4.0 through 4.1r2 allows remote authenticated users to inject arbitrary web script or HTML via the section parameter to index.fcgi.
Max CVSS
1.9
EPSS Score
0.31%
Published
2002-12-31
Updated
2008-09-05
Zeus web server allows remote attackers to view the source code for CGI programs via a null character (%00) at the end of a URL.
Max CVSS
5.0
EPSS Score
1.93%
Published
2000-02-08
Updated
2018-05-03
The Zeus web server administrative interface uses weak encryption for its passwords.
Max CVSS
5.0
EPSS Score
0.22%
Published
1999-10-25
Updated
2018-05-03
Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine.
Max CVSS
10.0
EPSS Score
1.22%
Published
1999-10-25
Updated
2018-05-03
4 vulnerabilities found
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!