Exploit GoAhead Web Server 2.1.x - Error Page Cross-Site Scripting

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
21608
Проверка EDB
  1. Пройдено
Автор
MATT MOORE
Тип уязвимости
REMOTE
Платформа
WINDOWS
CVE
cve-2002-0681
Дата публикации
2002-07-10
Код:
source: https://www.securityfocus.com/bid/5198/info

A vulnerability has been reported for GoAhead WebServer 2.1. Reportedly, it is possible for attackers to launch cross site scripting attacks against vulnerable systems.

GoAhead WebServer includes unsanitized requested URLs when displaying a 404 error page. An attacker may be able to trick a user into following a link which includes malicious script code, and executing the attack. 

GoAhead-server/SCRIPTalert(document.domain)/SCRIPT
 
Источник
www.exploit-db.com

Похожие темы