vendor:
Pi3Web
by:
aT4r@3wdesign.es
7,5
CVSS
HIGH
Denial of Service
119
CWE
Product Name: Pi3Web
Affected Version From: Pi3Web 2.0.1
Affected Version To: Pi3Web 2.0.1
Patch Exists: NO
Related CWE: N/A
CPE: a:pi3web:pi3web
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2003
Pi3Web 2.0.1 DoS – Pr00f of concept
Pi3Web Server is vulnerable to a denial of Service when a malformed HTTP Request is done the webserver hangs due to an stack overflow. GET /////////..[354]../////////
Mitigation:
No patch exists yet.