Shodan

60.191.209.230

Regular View Raw Data
Last Seen: 2024-05-19

GeneralInformation

Country China
City Hangzhou
Organization zhejiang jinshuofangzhiyouxiangongsi
ISP CHINANET-BACKBONE
ASN AS4134

WebTechnologies

JavaScript libraries
jQuery

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2012-2969 6.4Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to bypass intended restrictions on filename extensions for created files via a %00 sequence in a pathname within an HTTP request.
CVE-2012-2968 5.0Directory traversal vulnerability in Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to create files in arbitrary directories via a .. (dot dot) in a pathname within an HTTP request.
CVE-2012-2967 7.5Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons, which has unspecified impact and context-dependent attack vectors.
CVE-2012-2966 7.5Caucho Quercus, as distributed in Resin before 4.0.29, overwrites entries in the SERVER superglobal array on the basis of POST parameters, which has unspecified impact and remote attack vectors.
CVE-2012-2965 7.5Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of variables, which has unknown impact and remote attack vectors, related to an "HTTP Parameter Contamination" issue.
CVE-2010-3972 10.0Heap-based buffer overflow in the TELNET_STREAM_CONTEXT::OnSendData function in ftpsvc.dll in Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) 7.0, and IIS 7.5, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted FTP command, aka "IIS FTP Service Heap Buffer Overrun Vulnerability." NOTE: some of these details are obtained from third party information.
CVE-2010-2730 9.3Buffer overflow in Microsoft Internet Information Services (IIS) 7.5, when FastCGI is enabled, allows remote attackers to execute arbitrary code via crafted headers in a request, aka "Request Header Buffer Overflow Vulnerability."
CVE-2010-2087 4.3Oracle Mojarra 1.2_14 and 2.0.2, as used in IBM WebSphere Application Server, Caucho Resin, and other applications, does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary Expression Language (EL) statements via vectors that involve modifying the serialized view object.
CVE-2010-1899 4.3Stack consumption vulnerability in the ASP implementation in Microsoft Internet Information Services (IIS) 5.1, 6.0, 7.0, and 7.5 allows remote attackers to cause a denial of service (daemon outage) via a crafted request, related to asp.dll, aka "IIS Repeated Parameter Request Denial of Service Vulnerability."

OpenPorts 

662449347 | 2024-04-27T00:22:01.556853
80 / tcp 
662449347 | 2024-05-01T07:47:17.849792
81 / tcp 
754622717 | 2024-05-19T03:59:57.696843
5222 / tcp 
-1099054045 | 2024-05-14T00:19:17.790683
8083 / tcp 
1936686926 | 2024-05-17T22:40:24.084473
9000 / tcp 
1426640417 | 2024-04-26T10:44:25.375121
9090 / tcp 
-535066109 | 2024-05-16T07:45:23.606526
9595 / tcp 
-1674154037 | 2024-05-14T12:18:47.375917
9999 / tcp



Products
Pricing
Contact Us

Shodan ® - All rights reserved