Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cherokee-project cherokee 0.99.30 vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2
CVE-2011-2191
Cross-site request forgery (CSRF) vulnerability in Cherokee-admin in Cherokee prior to 1.2.99 allows remote malicious users to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences, as demonstrated by a crafted nickname field to...
Cherokee-project Cherokee 1.0.0Cherokee-project Cherokee 1.0.1Cherokee-project Cherokee 1.0.8Cherokee-project Cherokee 1.0.9Cherokee-project Cherokee 1.0.16Cherokee-project Cherokee 1.0.17Cherokee-project Cherokee 1.0.18Cherokee-project Cherokee 0.99.4Cherokee-project Cherokee 0.99.5Cherokee-project Cherokee 0.99.12Cherokee-project Cherokee 0.99.13Cherokee-project Cherokee 0.99.20Cherokee-project Cherokee 0.99.21Cherokee-project Cherokee 0.99.22Cherokee-project Cherokee 0.99.29Cherokee-project Cherokee 0.99.30Cherokee-project Cherokee 0.99.37Cherokee-project Cherokee 0.99.38Cherokee-project Cherokee 0.99.46Cherokee-project Cherokee 0.99.47Cherokee-project Cherokee 0.11.2Cherokee-project Cherokee 0.11.3
2.1
CVSSv2
CVE-2011-2190
The generate_admin_password function in Cherokee prior to 1.2.99 uses time and PID values for seeding of a random number generator, which makes it easier for local users to determine admin passwords via a brute-force attack.
Cherokee-project Cherokee 1.2.0Cherokee-project Cherokee 1.0.1Cherokee-project Cherokee 1.0.8Cherokee-project Cherokee 1.0.10Cherokee-project Cherokee 1.0.17Cherokee-project Cherokee 1.0.19Cherokee-project Cherokee 0.99.3Cherokee-project Cherokee 0.99.5Cherokee-project Cherokee 0.99.12Cherokee-project Cherokee 0.99.14Cherokee-project Cherokee 0.99.21Cherokee-project Cherokee 0.99.23Cherokee-project Cherokee 0.99.28Cherokee-project Cherokee 0.99.30Cherokee-project Cherokee 0.99.37Cherokee-project Cherokee 0.99.39Cherokee-project Cherokee 0.99.46Cherokee-project Cherokee 0.99.48Cherokee-project Cherokee 0.11.1Cherokee-project Cherokee 0.11.3Cherokee-project Cherokee 0.9.1Cherokee-project Cherokee 0.9.3
5
CVSSv2
CVE-2009-4489
header.c in Cherokee prior to 0.99.32 writes data to a log file without sanitizing non-printable characters, which might allow remote malicious users to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an esca...
Cherokee-project Cherokee
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook