This page lists publicly disclosed CVE vulnerabilities affecting ultrapop i-httpd (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2014-7263 | Cross-site scripting (XSS) vulnerability in ULTRAPOP.JP i-HTTPD allows remote attackers to inject arbitrary web script or HTML via a crafted HTTP header, a different vulnerability than CVE-2014-7261. | [email protected] | 4.3 | 0.18% | 2014-12-12 | 2026-05-06 |
| CVE-2014-7262 | Cross-site scripting (XSS) vulnerability in the Omake BBS component in ULTRAPOP.JP i-HTTPD allows remote attackers to inject arbitrary web script or HTML via a crafted string. | [email protected] | 4.3 | 0.28% | 2014-12-12 | 2026-05-06 |
| CVE-2014-7261 | Cross-site scripting (XSS) vulnerability in ULTRAPOP.JP i-HTTPD allows remote attackers to inject arbitrary web script or HTML via a crafted string that is improperly rendered during construction of a directory index page, a different vulnerability than CVE-2014-7263. | [email protected] | 4.3 | 0.32% | 2014-12-12 | 2026-05-06 |
| CVE-2014-7260 | The Server Side Includes (SSI) implementation in the File Upload BBS component in ULTRAPOP.JP i-HTTPD allows remote attackers to execute arbitrary commands by uploading files containing commands in SSI directives. | [email protected] | 7.5 | 0.88% | 2014-12-12 | 2026-05-06 |