CVE-2005-4502 Cross-site scripting (XSS) vulnerability in httprint v202, and possibly other versions before v301, allows remote attackers to inject arbitrary web script or HTML via the Server field in an HTTP respo...
MediumCVSS 4.3
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in httprint v202, and possibly other versions before v301, allows remote attackers to inject arbitrary web script or HTML via the Server field in an HTTP response, which is not sanitized before being displayed to the user.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| net-square httprint | = 202 | No fix listed |
References
- 20051222 CYBSEC - Security Advisory: httprint Multiple Vulnerabilities mailing-list
- net-square.com
- 18208 third-party-advisory
- 1015403 vdb-entry
- www.cybsec.com exploit vendor-advisory
- 20051222 CYBSEC - Security Advisory: httprint Multiple Vulnerabilities mailing-list
- 16031 exploit patch vdb-entry
- ADV-2005-3070 vdb-entry
- httprint-response-header-script-injection(23885) vdb-entry