VendorsCherokee-Projectcherokee0.99.48
Vulnerabilities

Cherokee-Project Cherokee 0.99.48

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2011-2191
Cross-site request forgery (CSRF) vulnerability in Cherokee-admin in Cherokee before 1.2.99 allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences, as demonstrated by a crafted nickname field to vserver/apply.
Published 2011-10-07 · Modified
6.8EPSS 0.014
CVE-2011-2190
The generate_admin_password function in Cherokee before 1.2.99 uses time and PID values for seeding of a random number generator, which makes it easier for local users to determine admin passwords via a brute-force attack.
Published 2011-10-07 · Modified
2.1EPSS 0.003