CVEvulnerability
CVE-2001-0987
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2001-07-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Cross-site scripting vulnerability in CGIWrap before 3.7 allows remote attackers to execute arbitrary Javascript on other web clients by causing the Javascript to be inserted into error messages that are generated by CGIWrap.
Affected configurations
• nathan neulinger cgiwrap (<= 3.7)
References
- http://archives.neohapsis.com/archives/bugtraq/2001-07/0499.html Vendor Advisory
- http://cgiwrap.sourceforge.net/changes.html Patch
- http://www.osvdb.org/1909 www.osvdb.org
- http://www.securityfocus.com/bid/3084 Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6886 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/bugtraq/2001-07/0499.html Vendor Advisory
- http://cgiwrap.sourceforge.net/changes.html Patch
- http://www.osvdb.org/1909 www.osvdb.org
- http://www.securityfocus.com/bid/3084 Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6886 exchange.xforce.ibmcloud.com