CVSS: 9.8EPSS: 10%CPEs: 1EXPL: 3CVE-2002-1951 – GoAhead Web Server 2.1 - Arbitrary Command Execution
https://notcve.org/view.php?id=CVE-2002-1951
31 Dec 2002 — Buffer overflow in GoAhead WebServer 2.1 allows remote attackers to execute arbitrary code via a long HTTP GET request with a large number of subdirectories. • https://www.exploit-db.com/exploits/21707 •
CVSS: 7.5EPSS: 5%CPEs: 7EXPL: 1CVE-2002-0680 – GoAhead Web Server 2.1.x - URL Encoded Slash Directory Traversal
https://notcve.org/view.php?id=CVE-2002-0680
12 Jul 2002 — Directory traversal vulnerability in GoAhead Web Server 2.1 allows remote attackers to read arbitrary files via a URL with an encoded / (%5C) in a .. (dot dot) sequence. NOTE: it is highly likely that this candidate will be REJECTED because it has been reported to be a duplicate of CVE-2001-0228. Vulnerabilidad de atravesamiento de directorios en GoAhead Web Server 2.1 permite a atacantes remotos mediante una URL con una "/" (carácter barra) codificada (%5C) en una secuencia .. (punto punto) • https://www.exploit-db.com/exploits/21607 •
CVSS: 7.5EPSS: 5%CPEs: 5EXPL: 2CVE-2002-0681 – GoAhead Web Server 2.1.x - Error Page Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2002-0681
12 Jul 2002 — Cross-site scripting vulnerability in GoAhead Web Server 2.1 allows remote attackers to execute script as other web users via script in a URL that generates a "404 not found" message, which does not quote the script. Vulnerabilidad de secuencias de comandos en sitios cruzados (cross-site scripting) en GoAhead Web Server 2.1 permite a atacantes remotos ejecutar secuencias de comandos como otros usuarios web mediante un script en una URL que genera un mensaje "404 no encontrado", que no le pone comillas al sc... • https://www.exploit-db.com/exploits/21608 •
CVSS: 7.5EPSS: 31%CPEs: 9EXPL: 4CVE-2002-1603 – GoAhead Web Server 2.1.x - '.ASP' File Source Code Disclosure
https://notcve.org/view.php?id=CVE-2002-1603
13 Feb 2002 — GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminated with a /, \, %2f (encoded /), %20 (encoded space), or %00 (encoded null) character, which returns the ASP source code unparsed. • https://www.exploit-db.com/exploits/23446 •
CVSS: 7.5EPSS: 6%CPEs: 1EXPL: 2CVE-2001-0385 – GoAhead Web Server 2.1 (Windows) - Denial of Service
https://notcve.org/view.php?id=CVE-2001-0385
24 May 2001 — GoAhead webserver 2.1 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory. • https://www.exploit-db.com/exploits/20770 •
CVSS: 7.5EPSS: 3%CPEs: 2EXPL: 1CVE-2001-0228 – GoAhead Web Server 2.0/2.1 - Directory Traversal
https://notcve.org/view.php?id=CVE-2001-0228
09 Mar 2001 — Directory traversal vulnerability in GoAhead web server 2.1 and earlier allows remote attackers to read arbitrary files via a .. attack in an HTTP GET request. • https://www.exploit-db.com/exploits/20607 •