herberlin - MidnightBSD Security Advisories

Advisories for herberlin

CVE-2004-2112 MEDIUM

Directory traversal vulnerability in BremsServer 1.2.4 allows remote attackers to read arbitrary files via ".." (dot dot) sequences in the URL.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor	Product	Version
herberlin	bremsserver	1.2.4

CVE-2004-2113 MEDIUM

Cross-site scripting (XSS) vulnerability in BremsServer 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the URL.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor	Product	Version
herberlin	bremsserver	1.2.4