Litespeed Technologies

litespeed_technologies

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Litespeed Web Server

litespeed_web_server

2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2007-5654 1Litespeed Technologies 1Litespeed Web Server Apr 23, 2026 Oct 23, 2007 N/A· v4 N/A· v3 5.0 MEDIUM· v2 LiteSpeed Web Server before 3.2.4 allows remote attackers to trigger use of an arbitrary MIME type for a file via a "%00." sequence followed by a new extension, as demonstrated by reading PHP source code via requests for...Show more LiteSpeed Web Server before 3.2.4 allows remote attackers to trigger use of an arbitrary MIME type for a file via a "%00." sequence followed by a new extension, as demonstrated by reading PHP source code via requests for .php%00.txt files, aka "Mime Type Injection."Show less
CVE-2005-3695 1Litespeed Technologies 1Litespeed Web Server Apr 16, 2026 Nov 20, 2005 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in admin/config/confMgr.php in LiteSpeed Web Server 2.1.5 allows remote attackers to inject arbitrary web script or HTML via the m parameter.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2007-5654

1Litespeed Technologies

1Litespeed Web Server

Apr 23, 2026

Oct 23, 2007

N/A· v4

N/A· v3

5.0 MEDIUM· v2

LiteSpeed Web Server before 3.2.4 allows remote attackers to trigger use of an arbitrary MIME type for a file via a "%00." sequence followed by a new extension, as demonstrated by reading PHP source code via requests for...Show more

CVE-2005-3695

1Litespeed Technologies

1Litespeed Web Server

Apr 16, 2026

Nov 20, 2005

N/A· v4

N/A· v3

4.3 MEDIUM· v2

Cross-site scripting (XSS) vulnerability in admin/config/confMgr.php in LiteSpeed Web Server 2.1.5 allows remote attackers to inject arbitrary web script or HTML via the m parameter.