Secunia

Donato Ferrante has reported multiple vulnerabilities in TinyServer, allowing malicious people to view sensitive information or cause a Denial of Service.

TinyServer fails to check requests for the classic directory traversal character sequence "../". This can be exploited to view files outside the web root.

Various incomplete or malformed HTTP requests cause the process to crash. This can be exploited to cause a Denial of Service.

Error pages contain the requested string unfiltered including HTML and script code. This allows malicious people to conduct Cross Site Scripting attacks.

The vulnerabilities have been reported in version 1.1. Prior versions may also be affected.

Solution
Use another product.

Deep Links
Links available in Customer Area