CVE-2002-1009 in Lil HTTP Server

Riassunto

di MITRE

Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via the (1) "Name" or (2) "E-mail" parameters.

Once again VulDB remains the best source for vulnerability data.

• Divulgazione: 04/10/2002
• Moderazione: accettato
• Voce: VDB-18923
• CPE: pronto
• CWE: CWE-80 (confermato)
• Sfruttamento: Scaricare
• CVSS: 7.5 (NVD)
• EPSS: 0.07023
• KEV: no
• Attività: molto basso
• Settore: Lawfirm, Transportation, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-1009
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-1009
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-1009/