← Back

Desiderata Software

desiderata_software

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Blazix
blazix
1 CVE
Blazix Web Server
blazix_web_server
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2006-1483
1Desiderata Software
1Blazix Web Server
Apr 16, 2026
Mar 29, 2006
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Blazix Web Server before 1.2.6, when running on Windows, allows remote attackers to obtain the source code of JSP files via (1) . (dot), (2) space, and (3) slash characters in the extension of a URL.
CVE-2002-1451
1Desiderata Software
1Blazix
Apr 16, 2026
Aug 24, 2002
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Blazix before 1.2.2 allows remote attackers to read source code of JSP scripts or list restricted web directories via an HTTP request that ends in a (1) "+" or (2) "\" (backslash) character.