medium4.3Public exploit code
CVE-2004-2096
Cross-site scripting (XSS) vulnerability in Mephistoles httpd 0.6.0 final allows remote attackers to execute arbitrary script as other users by injecting arbit…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Mephistoles HTTPd 0.6 - Cross-Site Scripting2004-01-21 · remote · multiple · Verified
Impact
Cross-site scripting (XSS) vulnerability in Mephistoles httpd 0.6.0 final allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into the URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mephistoles Internet Suite | Mephistoles Httpd | Versions 0.6_final, 0.6_p1, 0.6_p2 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=107470433714179&w=2
- http://secunia.com/advisories/10693
- http://www.osvdb.org/3689
- http://www.securityfocus.com/bid/9470
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14899
- http://marc.info/?l=bugtraq&m=107470433714179&w=2
- http://secunia.com/advisories/10693
- http://www.osvdb.org/3689
- http://www.securityfocus.com/bid/9470
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14899