CVE-2008-1283 Cross-site scripting (XSS) vulnerability in Neptune Web Server 3.0 allows remote attackers to inject arbitrary web script or HTML via the URI, which is not properly handled in the 404 error page.
MediumCVSS 4.3
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Neptune Web Server 3.0 allows remote attackers to inject arbitrary web script or HTML via the URI, which is not properly handled in the 404 error page.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| silver-forge neptune web server | = 3.0 | No fix listed |
References
- 3725 third-party-advisory
- 20080307 XSS in Neptune Web Server mailing-list
- 28148 exploit vdb-entry
- neptune-webserver-404errorpage-xss(41089) vdb-entry