CVE-2011-4273 in Webserver
Zusammenfassung (Englisch)
Multiple cross-site scripting (XSS) vulnerabilities in GoAhead Webserver 2.18 allow remote attackers to inject arbitrary web script or HTML via (1) the group parameter to goform/AddGroup, related to addgroup.asp; (2) the url parameter to goform/AddAccessLimit, related to addlimit.asp; or the (3) user (aka User ID) or (4) group parameter to goform/AddUser, related to adduser.asp.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservieren
02.11.2011
Veröffentlichung
03.11.2011
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 59362 | GoAhead Webserver Cross Site Scripting | 79 | Proof-of-Concept | Nicht definiert | CVE-2011-4273 |