Website Professional

website_professional

Vendor: Oreilly • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2001-0626 1Oreilly 1Website Professional Apr 16, 2026 Aug 22, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 O'Reilly Website Professional 2.5.4 and earlier allows remote attackers to determine the physical path to the root directory via a URL request containing a ":" character.
CVE-2000-0622 1Oreilly 1Website Professional Apr 16, 2026 Jul 19, 2000 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execute arbitrary commands via a URL containing a long "keywords" parameter.
CVE-2000-0623 1Oreilly 1Website Professional Apr 16, 2026 Jul 17, 2000 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in O'Reilly WebSite Professional web server 2.4 and earlier allows remote attackers to execute arbitrary commands via a long GET request or Referrer header.
CVE-2000-0066 1Oreilly 1Website Professional Apr 16, 2026 Jan 13, 2000 N/A· v4 N/A· v3 5.0 MEDIUM· v2 WebSite Pro allows remote attackers to determine the real pathname of webdirectories via a malformed URL request.