CVE-2003-1271 Cross-site scripting vulnerability (XSS) in AN HTTP 1.41e allows remote attackers to execute arbitrary web script or HTML as other users via a URL containing the script.
MediumCVSS 4.3
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting vulnerability (XSS) in AN HTTP 1.41e allows remote attackers to execute arbitrary web script or HTML as other users via a URL containing the script.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| an-http | = 1.41e | No fix listed |
References
- an-http-script-xss(10977) vdb-entry
- 20030104 AN HTTPd v.1.41e: DoS, CSS, real patch attack exploit mailing-list vendor-advisory
- 6529 exploit patch vdb-entry