medium4.3Public exploit code
CVE-2002-1455
Multiple cross-site scripting (XSS) vulnerabilities in OmniHTTPd allow remote attackers to insert script or HTML into web pages via (1) test.php, (2) test.shtm…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- OmniHTTPd 1.1/2.0.x/2.4 - test.shtml Sample Application Cross-Site Scripting2002-08-26 · remote · windows · Verified
- OmniHTTPd 1.1/2.0.x/2.4 - 'test.php' Sample Application Cross-Site Scripting2002-08-26 · remote · windows · Verified
Impact
Multiple cross-site scripting (XSS) vulnerabilities in OmniHTTPd allow remote attackers to insert script or HTML into web pages via (1) test.php, (2) test.shtml, or (3) redir.exe.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Omnicron | Omnihttpd | All versions |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-08/0263.html
- http://archives.neohapsis.com/archives/bugtraq/2002-08/0264.html
- http://archives.neohapsis.com/archives/bugtraq/2002-08/0266.html
- http://archives.neohapsis.com/archives/bugtraq/2002-08/0263.html
- http://archives.neohapsis.com/archives/bugtraq/2002-08/0264.html
- http://archives.neohapsis.com/archives/bugtraq/2002-08/0266.html