medium4.3Public exploit code
CVE-2003-1511
Cross-site scripting (XSS) vulnerability in Bajie Java HTTP Server 0.95 through 0.95zxv4 allows remote attackers to inject arbitrary web script or HTML via (1)…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Bajie HTTP Server 0.95 - Example Scripts and Servlets Cross-Site Scripting2003-10-16 · remote · multiple · Verified
Impact
Cross-site scripting (XSS) vulnerability in Bajie Java HTTP Server 0.95 through 0.95zxv4 allows remote attackers to inject arbitrary web script or HTML via (1) the query string to test.txt, (2) the guestName parameter to the custMsg servlet, or (3) the cookiename parameter to the CookieExample servlet.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bajie | Java Http Server | Version 0.95 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/10023
- http://securityreason.com/securityalert/3306
- http://www.geocities.com/gzhangx/websrv/docs/security.html
- http://www.securityfocus.com/archive/1/341452
- http://www.securityfocus.com/bid/8841
- http://secunia.com/advisories/10023
- http://securityreason.com/securityalert/3306
- http://www.geocities.com/gzhangx/websrv/docs/security.html
- http://www.securityfocus.com/archive/1/341452
- http://www.securityfocus.com/bid/8841