high7.5Public exploit code
CVE-2002-0731
Cross-site scripting vulnerability in demonstration scripts for vqServer allows remote attackers to execute arbitrary script via a link that contains the scrip…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- vqServer 1.9.x - CGI Demo Program Script Injection2002-04-21 · webapps · cgi · Verified
Impact
Cross-site scripting vulnerability in demonstration scripts for vqServer allows remote attackers to execute arbitrary script via a link that contains the script in arguments to demo scripts such as respond.pl.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vqsoft | Vqserver | Versions 1.9, 1.9.30, 1.9.47, 1.9.55 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0313.html
- http://www.iss.net/security_center/static/8935.php
- http://www.securityfocus.com/bid/4573
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0313.html
- http://www.iss.net/security_center/static/8935.php
- http://www.securityfocus.com/bid/4573