Java Http Server (Bajie) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2003-12-31. Vendor: Bajie.

CVEs of Java Http Server

• CVE-2003-1543 - CVSS 4.3 (medium), 2003-12-31: Cross-site scripting (XSS) vulnerability in Bajie Http Web Server 0.95zxe, 0.95zxc, and possibly others, allows remote attackers to inject arbitrary web…
• CVE-2003-1511 - CVSS 4.3 (medium), 2003-12-31: Cross-site scripting (XSS) vulnerability in Bajie Java HTTP Server 0.95 through 0.95zxv4 allows remote attackers to inject arbitrary web script or HTML via…
• CVE-2001-0307 - CVSS 7.5 (high), 2001-05-03: Bajie HTTP JServer 0.78, and other versions before 0.80, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request for…
• CVE-2001-0308 - CVSS 7.5 (high), 2001-05-03: UploadServlet in Bajie HTTP JServer 0.78, and possibly other versions before 0.80, allows remote attackers to execute arbitrary commands by calling the…
• CVE-2000-0774 - CVSS 5 (medium), 2000-10-20: The sample Java servlet "test" in Bajie HTTP web server 0.30a reveals the real pathname of the web document root.
• CVE-2000-0773 - CVSS 5 (medium), 2000-10-20: Bajie HTTP web server 0.30a allows remote attackers to read arbitrary files via a URL that contains a "....", a variant of the dot dot directory traversal…