Approved changes feed: RSS · Atom

cpe:2.3:a:cherokee:cherokee_httpd:0.4.7:*:*:*:*:*:*:*

part: a version: 0.4.7 update: *

VendorCherokee (d1e1d1fd-e404-5e93-b000-d2d71bf95ec5)
ProductCherokee Httpd (cf6ce714-af9b-5813-b6b6-5a8aa2cb216f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-1681 vulnerable 2026-06-08 04:48:57.815129 Details available
Cross-site scripting (XSS) vulnerability in Cherokee HTTPD 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a malformed request that generates an HTTP 400 error, which is not properly handled when the error message is generated.
Published: 2006-04-10T23:00:00.000Z
Updated: 2024-08-07T17:19:49.379Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2171 vulnerable 2026-06-08 04:48:08.773012 Details available
Cross-site scripting (XSS) vulnerability in Cherokee before 0.4.8 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly quoted in the resulting error page.
Published: 2005-07-10T04:00:00.000Z
Updated: 2024-08-08T01:15:01.658Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1097 vulnerable 2026-06-08 04:47:52.943866 Details available
Format string vulnerability in the cherokee_logger_ncsa_write_string function in Cherokee 0.4.17 and earlier, when authenticating via auth_pam, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via format string specifiers in the URL.
Published: 2004-12-01T05:00:00.000Z
Updated: 2024-08-08T00:39:00.853Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.