Vulnerability in Summit Computer Networks Lil HTTP Server

CVE-2002-1009

Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via the (1) "Name" or (2) "E-mail" parameters.

EPSS: 0.070 (93.5th percentile) — read the EPSS interpretation.

Affected products

Summit_computer_networks Lil_http_server — versions 2.1, 2.2
N/a — versions n/a

References

cve@mitre.org (vdb-entry, Vendor Advisory, x_refsource_XF)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)