Vulnerability in Perception Liteserve

CVE-2002-2192

Cross-site scripting (XSS) vulnerability in Perception LiteServe 2.0.1 allows remote attackers to execute arbitrary web script via (1) a Host: header when DNS wildcards are supported or (2) the query string in a "dir" request to indexed folders.

EPSS: 0.037 (88.5th percentile) — read the EPSS interpretation.

Affected products

References