high7.5Public exploit code
CVE-2001-0987
Cross-site scripting vulnerability in CGIWrap before 3.7 allows remote attackers to execute arbitrary Javascript on other web clients by causing the Javascript…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CGIWrap 2.x/3.x - Cross-Site Scripting2001-07-22 · remote · cgi · Verified
Impact
Cross-site scripting vulnerability in CGIWrap before 3.7 allows remote attackers to execute arbitrary Javascript on other web clients by causing the Javascript to be inserted into error messages that are generated by CGIWrap.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nathan Neulinger | Cgiwrap | through 3.7 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2001-07/0499.html
- http://cgiwrap.sourceforge.net/changes.html
- http://www.osvdb.org/1909
- http://www.securityfocus.com/bid/3084
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6886
- http://archives.neohapsis.com/archives/bugtraq/2001-07/0499.html
- http://cgiwrap.sourceforge.net/changes.html
- http://www.osvdb.org/1909
- http://www.securityfocus.com/bid/3084
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6886