Description

LiteSpeed Technologies LiteSpeed Web Server 4.0.x before 4.0.15 allows remote attackers to read the source code of scripts via an HTTP request with a null byte followed by a .txt file extension.

Remediation

References

CVE-2010-2333

Related Vulnerabilities

WordPress Plugin WP CSV Unspecified Vulnerability (1.7.8.0)

Dot CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-8905)

Oracle JRE CVE-2013-1476 Vulnerability (CVE-2013-1476)

WordPress Plugin Backend Localization Multiple Cross-Site Scripting Vulnerabilities (1.6.1)

IBM WebSEAL Improper Restriction of Rendered UI Layers or Frames Vulnerability (CVE-2018-1803)

Severity

Medium

Classification

CVE-2010-2333 CWE-200

Tags

Missing Update Known Vulnerabilities