CVE-2002-1009 Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via the (1) "Name" or (2)...
HighCVSS 7.5
EPSS 7.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via the (1) "Name" or (2) "E-mail" parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| summit computer networks lil http server | = 2.1 | No fix listed |
| summit computer networks lil http server | = 2.2 | No fix listed |
References
- 20020711 Lil'HTTP Pbcgi.cgi XSS Vulnerability mailing-list
- lilhttp-pbcgi-xss(9548) vdb-entry vendor-advisory
- 5211 exploit vdb-entry vendor-advisory