PT-2002-2307 · Mywebserver · Mywebserver

Publicado 2002-08-14 · Atualizado 2016-10-18 · CVE-2002-1453

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions MyWebServer version 1.0.2

Description A cross-site scripting (XSS) issue allows remote attackers to insert script and HTML via a long request followed by the malicious script. This script is then echoed back to the user in an error message.

Recommendations For MyWebServer version 1.0.2, consider validating and sanitizing user input to prevent malicious scripts from being injected and echoed back in error messages. As a temporary workaround, restrict the length of user requests to prevent long requests that may contain malicious scripts.

Exploit

Correção

Identificadores relacionados

CVE-2002-1453

Produtos afetados

Mywebserver

Referências · 6

• 🔥 https://exploit-db.com/exploits/21710 · Exploit
• 🔥 http://securityfocus.com/bid/5470 · Exploit
• 🔥 http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0077.html · Exploit
• http://iss.net/security_center/static/9861.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1453 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=102935720109934&w=2 · Nota