Vulnerability in Omnicron Omnihttpd

CVE-2002-1455

Multiple cross-site scripting (XSS) vulnerabilities in OmniHTTPd allow remote attackers to insert script or HTML into web pages via (1) test.php, (2) test.shtml, or (3) redir.exe.

EPSS: 0.039 (89.3th percentile) — read the EPSS interpretation.

Affected products

Public proof-of-concept exploits

References

  • cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ)
  • cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ)
  • cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ)

Frequently asked questions

What is CVE-2002-1455?
CVE-2002-1455 is a vulnerability in Omnicron Omnihttpd. Published 2003-06-09.
Is CVE-2002-1455 known to be exploited?
1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.