Vulnerability in Goahead Software Webserver
CVE-2002-0681
Cross-site scripting vulnerability in GoAhead Web Server 2.1 allows remote attackers to execute script as other web users via script in a URL that generates a "404 not found" message, which does not quote the script.
EPSS: 0.083 (94.4th percentile) — read the EPSS interpretation.
Affected products
- Goahead_software Goahead_webserver — versions 2.1.1, 2.1.2, 2.1.3
- N/a — versions n/a
References
- cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_VULNWATCH)
- cve@mitre.org (vdb-entry, Vendor Advisory, x_refsource_XF)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)