medium6.8
CVE-2002-1053
Cross-site scripting (XSS) vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows remote attackers to execute arbitrary script via a URL that contains a …
Impact
Cross-site scripting (XSS) vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows remote attackers to execute arbitrary script via a URL that contains a reference to a nonexistent host followed by the script, which is included in the resulting error message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| W3c | Jigsaw | Version 2.2 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-08/0190.html
- http://www.iss.net/security_center/static/9914.php
- http://www.osvdb.org/4015
- http://www.securityfocus.com/bid/5506
- http://www.w3.org/Jigsaw/RelNotes.html#2.2.1
- http://archives.neohapsis.com/archives/bugtraq/2002-08/0190.html
- http://www.iss.net/security_center/static/9914.php
- http://www.osvdb.org/4015
- http://www.securityfocus.com/bid/5506
- http://www.w3.org/Jigsaw/RelNotes.html#2.2.1