CVE-2011-4273 in Webserver
Summary
Multiple cross-site scripting (XSS) vulnerabilities in GoAhead Webserver 2.18 allow remote attackers to inject arbitrary web script or HTML via (1) the group parameter to goform/AddGroup, related to addgroup.asp; (2) the url parameter to goform/AddAccessLimit, related to addlimit.asp; or the (3) user (aka User ID) or (4) group parameter to goform/AddUser, related to adduser.asp.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
11/02/2011
Disclosure
11/03/2011
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 59362 | GoAhead Webserver cross site scripting | 79 | Proof-of-Concept | Not defined | CVE-2011-4273 |