CVEvulnerability
CVE-2003-1511
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2003-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in Bajie Java HTTP Server 0.95 through 0.95zxv4 allows remote attackers to inject arbitrary web script or HTML via (1) the query string to test.txt, (2) the guestName parameter to the custMsg servlet, or (3) the cookiename parameter to the CookieExample servlet.
Affected configurations
• bajie java http server 0.95
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/10023 Vendor Advisory
- http://securityreason.com/securityalert/3306 Exploit
- http://www.geocities.com/gzhangx/websrv/docs/security.html www.geocities.com
- http://www.securityfocus.com/archive/1/341452 Exploit
- http://www.securityfocus.com/bid/8841 Exploit, Patch
- http://secunia.com/advisories/10023 Vendor Advisory
- http://securityreason.com/securityalert/3306 Exploit
- http://www.geocities.com/gzhangx/websrv/docs/security.html www.geocities.com
- http://www.securityfocus.com/archive/1/341452 Exploit
- http://www.securityfocus.com/bid/8841 Exploit, Patch