CVE-2020-15688

Mô tả

Tham khảo

• packetstormsecurity.com/files/159505/EmbedThis-GoAhead-Web-Server-5.1.1-Digest-Authentication-Capture-Replay-Nonce-Reuse.html · Exploit
• embedthis/goahead-gpl · Third Party Advisory

Lỗ hổng khác của goahead

• CVE-2021-41615NGHIÊM TRỌNG 9.8websda.c in GoAhead WebServer 2.1.8 has insufficient nonce entropy because the nonce calculation relies on the hardcoded onceuponatimeinpara…
• CVE-2021-43298NGHIÊM TRỌNG 9.8The code that performs password matching when using 'Basic' HTTP authentication does not use a constant-time memcmp and has no rate-limiting…
• CVE-2021-42342NGHIÊM TRỌNG 9.8An issue was discovered in GoAhead 4.x and 5.x before 5.1.5. In the file upload filter, user form variables can be passed to CGI scripts wit…
• CVE-2019-5097CAO 7.5A denial-of-service vulnerability exists in the processing of multi-part/form-data requests in the base GoAhead web server application in ve…
• CVE-2019-5096NGHIÊM TRỌNG 9.8An exploitable code execution vulnerability exists in the processing of multi-part/form-data requests within the base GoAhead web server app…