medium4.3
CVE-2004-1512
Cross-site scripting (XSS) vulnerability in Response_default.html in 04WebServer 1.42 allows remote attackers to execute arbitrary web script or HTML via scrip…
Impact
Cross-site scripting (XSS) vulnerability in Response_default.html in 04WebServer 1.42 allows remote attackers to execute arbitrary web script or HTML via script code in the URL, which is not quoted in the resulting default error page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Soft3304 | 04webserver | Version 1.42 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=110012542615484&w=2
- http://marc.info/?l=bugtraq&m=110054395311823&w=2
- http://secunia.com/advisories/13159/
- http://www.security.org.sg/vuln/04webserver142.html
- http://www.securityfocus.com/bid/11652
- http://www.soft3304.net/04WebServer/Security.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18033
- http://marc.info/?l=bugtraq&m=110012542615484&w=2
- http://marc.info/?l=bugtraq&m=110054395311823&w=2
- http://secunia.com/advisories/13159/
- http://www.security.org.sg/vuln/04webserver142.html
- http://www.securityfocus.com/bid/11652
- http://www.soft3304.net/04WebServer/Security.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18033