CVE-2002-1497 Cross-site scripting (XSS) vulnerability in Null HTTP Server 0.5.0 and earlier allows remote attackers to insert arbitrary HTML into a "404 Not Found" response.
MediumCVSS 4.3
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Null HTTP Server 0.5.0 and earlier allows remote attackers to insert arbitrary HTML into a "404 Not Found" response.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nulllogic null httpd | <= 0.5.0 | No fix listed |
References
- freshmeat.net vendor-advisory
- 5603 vdb-entry
- null-httpd-xss(10004) vdb-entry