TinyWeb 1.9 allows remote attackers to cause a denial of service (CPU consumption) via a .%00. in an HTTP GET request to the cgi-bin directory.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Tinyweb |
Rit_research_labs |
1.9 (including) |
1.9 (including) |
References