NetSight
IP …
high7.5Public exploit code

CVE-2002-0681

Cross-site scripting vulnerability in GoAhead Web Server 2.1 allows remote attackers to execute script as other web users via script in a URL that generates a …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Cross-site scripting vulnerability in GoAhead Web Server 2.1 allows remote attackers to execute script as other web users via script in a URL that generates a "404 not found" message, which does not quote the script.

Affected products

VendorProductAffected versions
Goahead SoftwareGoahead Webserver
Versions 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5

References