Description (CNA)
Cross-site scripting (XSS) vulnerability in Response_default.html in 04WebServer 1.42 allows remote attackers to execute arbitrary web script or HTML via script code in the URL, which is not quoted in the resulting default error page.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/11652
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18033
- http://marc.info/?l=bugtraq&m=110012542615484&w=2
- http://www.soft3304.net/04WebServer/Security.html
- http://www.security.org.sg/vuln/04webserver142.html
- http://marc.info/?l=bugtraq&m=110054395311823&w=2
- http://secunia.com/advisories/13159/
ADP enrichment
No English description supplied.
- http://www.securityfocus.com/bid/11652
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18033
- http://marc.info/?l=bugtraq&m=110012542615484&w=2
- http://www.soft3304.net/04WebServer/Security.html
- http://www.security.org.sg/vuln/04webserver142.html
- http://marc.info/?l=bugtraq&m=110054395311823&w=2
- http://secunia.com/advisories/13159/