CVEvulnerability
CVE-2002-1009
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-10-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via the (1) "Name" or (2) "E-mail" parameters.
Affected configurations
• summit computer networks lil http server 2.1
• summit computer networks lil http server 2.2
References
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0112.html archives.neohapsis.com
- http://www.iss.net/security_center/static/9548.php Vendor Advisory
- http://www.securityfocus.com/bid/5211 Exploit, Vendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0112.html archives.neohapsis.com
- http://www.iss.net/security_center/static/9548.php Vendor Advisory
- http://www.securityfocus.com/bid/5211 Exploit, Vendor Advisory