Unscored CVE-2000-1024 EUVD-2000-1011GHSA-3qr6-8fp7-xj4j

eWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet, which allows remote attackers to upload …

Published Jan 22, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

eWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet, which allows remote attackers to upload files and execute arbitrary commands.

References

ewave-servletexec-file-upload(5450) vdb-entry
1876 vdb-entry
20001101 Unify eWave ServletExec upload mailing-list