high7.5Public exploit code
CVE-2001-0520
Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent filtering of SCRIPT tags by embedding the scripts within certain HTML tag…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- eSafe Gateway 2.1 - Script-filtering Bypass2001-05-20 · remote · multiple · Verified
Impact
Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent filtering of SCRIPT tags by embedding the scripts within certain HTML tags including (1) onload in the BODY tag, (2) href in the A tag, (3) the BUTTON tag, (4) the INPUT tag, or (5) any other tag in which scripts can be defined.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aladdin Knowledge Systems | Esafe Gateway | Version 3.0 |