CVEvulnerability
CVE-2003-1543
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2003-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in Bajie Http Web Server 0.95zxe, 0.95zxc, and possibly others, allows remote attackers to inject arbitrary web script or HTML via the query string, which is reflected in an error message.
Affected configurations
• bajie java http server 0.95
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/8477 Vendor Advisory
- http://securitytracker.com/id?1006428 securitytracker.com
- http://www.geocities.com/gzhangx/websrv/docs/security.html www.geocities.com
- http://www.lucaercoli.it/advs/bajie.txt Exploit
- http://www.securiteam.com/securitynews/5LP10009FC.html www.securiteam.com
- http://www.securityfocus.com/bid/7344 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11687 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/8477 Vendor Advisory
- http://securitytracker.com/id?1006428 securitytracker.com
- http://www.geocities.com/gzhangx/websrv/docs/security.html www.geocities.com
- http://www.lucaercoli.it/advs/bajie.txt Exploit
- http://www.securiteam.com/securitynews/5LP10009FC.html www.securiteam.com
- http://www.securityfocus.com/bid/7344 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11687 exchange.xforce.ibmcloud.com