high7.5Public exploit code
CVE-2002-1009
Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in oth…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Summit Computer Networks Lil' HTTP Server 2.1/2.2 - 'pbcgi.cgi' Cross-Site Scripting2002-07-11 · remote · windows · Verified
Impact
Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via the (1) "Name" or (2) "E-mail" parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Summit Computer Networks | Lil Http Server | Versions 2.1, 2.2 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0112.html
- http://www.iss.net/security_center/static/9548.php
- http://www.securityfocus.com/bid/5211
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0112.html
- http://www.iss.net/security_center/static/9548.php
- http://www.securityfocus.com/bid/5211