CVE-2004-2128 Cross-site scripting (XSS) vulnerability in BRS WebWeaver 1.07 allows remote attackers to execute arbitrary script as other users via the query string to ISAPISkeleton.dll.
MediumCVSS 6.8
EPSS 2.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in BRS WebWeaver 1.07 allows remote attackers to execute arbitrary script as other users via the query string to ISAPISkeleton.dll.
Affected products
No affected product data has been published yet.
References
- 20040128 BRS WebWeaver Webserver Cross Site Scripting Vulnerability mailing-list
- 10741 patch third-party-advisory
- www.brswebweaver.com
- 3741 vdb-entry
- 9516 exploit vdb-entry
- 1008880 vdb-entry
- webweaver-isapiskeleton-xss(14977) vdb-entry