CVE-2015-1002

MediumCVSS 6.4/10Last modified Jun 17, 2026

Description

IniNet embeddedWebServer (aka eWebServer) before 2.02 mishandles URL encoding, which allows remote attackers to write to or delete files via a crafted string.

Metrics

CVSS 2.0 6.4/10AV:N/AC:L/Au:N/C:N/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published: Oct 25, 2015
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-100209.8A vulnerability has been found in ssn2013 cis450Project and classified as critical. This vulnerability affects the function addUser of the f CVE-2015-100216.1A vulnerability was found in ritterim definely. It has been classified as problematic. Affected is an unknown function of the file src/datab CVE-2015-100229.8A vulnerability was found in IISH nlgis2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of th CVE-2015-100239.8A vulnerability classified as critical has been found in Fumon trello-octometric. This affects the function main of the file metrics-ui/serv CVE-2015-100249.8A vulnerability classified as critical was found in hoffie larasync. This vulnerability affects unknown code of the file repository/content/CVE-2015-100257.5A vulnerability has been found in luelista miniConf up to 1.7.6 and classified as problematic. Affected by this vulnerability is an unknown CVE-2015-100269.8A vulnerability was found in tiredtyrant flairbot. It has been declared as critical. This vulnerability affects unknown code of the file fla CVE-2015-100279.8A vulnerability, which was classified as problematic, has been found in hydrian TTRSS-Auth-LDAP. Affected by this issue is some unknown func CVE-2015-100286.1A vulnerability has been found in ss15-this-is-sparta and classified as problematic. This vulnerability affects unknown code of the file js/CVE-2015-100299.8A vulnerability classified as problematic was found in kelvinmo simplexrd up to 3.1.0. This vulnerability affects unknown code of the file s CVE-2015-10035.0Directory traversal vulnerability in IniNet embeddedWebServer (aka eWebServer) before 2.02 allows remote attackers to read arbitrary files v CVE-2015-100305.3A vulnerability has been found in SUKOHI Surpass and classified as critical. This vulnerability affects unknown code of the file src/Sukohi/