Key Focus: >> Kf Web Server Security Vulnerabilities
Cross-site scripting (XSS) vulnerability in index.wkf in KeyFocus (KF) web server 3.1.0 allows remote attackers to inject arbitrary web script or HTML via the opsubmenu parameter.
CVSS Score
4.3
EPSS Score
0.089
Published
2007-06-26
Directory traversal vulnerability in KeyFocus web server 1.0.8 allows remote attackers to read arbitrary files for recognized MIME type files via "...", "....", ".....", and other multiple dot sequences.
CVSS Score
5.0
EPSS Score
0.076
Published
2002-12-31
KeyFocus (KF) web server 1.0.2 allows remote attackers to list directories and read restricted files via an HTTP request containing a %00 (null) character.
CVSS Score
5.0
EPSS Score
0.07
Published
2002-10-04
Buffer overflow in KeyFocus (KF) web server 1.0.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed HTTP header.
CVSS Score
7.5
EPSS Score
0.014
Published
2002-10-04