Qinguoyi TinyWebServer Improper Authentication Vulnerability
Vulnerability
A critical vulnerability allowing improper authentication has been identified in Qinguoyi TinyWebServer versions through 1.0. The issue arises in the file http/http_conn.cpp, where the argument m_url_real is manipulated, leading to authentication flaws. This vulnerability can be exploited remotely.
Impact
Exploitation of this vulnerability allows for improper authentication, potentially leading to unauthorized access or actions within the application.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
5.0exploitability
7.4remediation
0.0relevance
0.0threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.