PT-2001-2142 · Proxomitron · Proxomitron

Published 2001-07-24 · Updated 2017-12-19 · CVE-2001-0991

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Proxomitron versions Naoko-4 BetaFour and earlier

Description A cross-site scripting issue allows remote attackers to execute arbitrary script on other clients via an incorrect URL containing the malicious script, which is printed back in an error message.

Recommendations For Proxomitron versions Naoko-4 BetaFour and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2001-0991

Affected Products

Proxomitron

References · 5

• 🔥 https://exploit-db.com/exploits/21025 · Exploit
• 🔥 http://securityfocus.com/bid/3087 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0991 · Security Note
• http://securityfocus.com/archive/1/198954 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6887 · Note