medium4.3Public exploit code
CVE-2002-1445
Cross-site scripting (XSS) vulnerability in CERN Proxy Server allows remote attackers to execute script as other users via a link to a non-existent page whose …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- W3C CERN HTTPd 3.0 Proxy - Cross-Site Scripting2002-08-12 · remote · unix · Verified
Impact
Cross-site scripting (XSS) vulnerability in CERN Proxy Server allows remote attackers to execute script as other users via a link to a non-existent page whose name contains the script, which is inserted into the resulting error page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| W3c | Cern Httpd | Version 3.0 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-08/0097.html
- http://www.iss.net/security_center/static/9834.php
- http://www.securityfocus.com/bid/5447
- http://archives.neohapsis.com/archives/bugtraq/2002-08/0097.html
- http://www.iss.net/security_center/static/9834.php
- http://www.securityfocus.com/bid/5447