CVE-2002-0681 Cross-site scripting vulnerability in GoAhead Web Server 2.1 allows remote attackers to execute script as other web users via script in a URL that generates a "404 not found" message, which does not q...
HighCVSS 7.5
EPSS 8.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting vulnerability in GoAhead Web Server 2.1 allows remote attackers to execute script as other web users via script in a URL that generates a "404 not found" message, which does not quote the script.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| goahead software goahead webserver | = 2.1.1 | No fix listed |
| goahead software goahead webserver | = 2.1.2 | No fix listed |
| goahead software goahead webserver | = 2.1.3 | No fix listed |
| goahead software goahead webserver | = 2.1.4 | No fix listed |
| goahead software goahead webserver | = 2.1.5 | No fix listed |
References
- 20020710 [VulnWatch] wp-02-0001: GoAhead Web Server Directory Traversal + Cross Site Scripting mailing-list vendor-advisory
- freecode.com
- 20020710 wp-02-0001: GoAhead Web Server Directory Traversal + Cross Site Scripting mailing-list
- 81099 vdb-entry
- goahead-error-msg-xss(9518) vdb-entry vendor-advisory
- 5198 exploit patch vdb-entry vendor-advisory