PT-2002-2307 · Mywebserver · Mywebserver

Published 2002-08-14 · Updated 2016-10-18 · CVE-2002-1453

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions MyWebServer version 1.0.2

Description A cross-site scripting (XSS) issue allows remote attackers to insert script and HTML via a long request followed by the malicious script. This script is then echoed back to the user in an error message.

Recommendations For MyWebServer version 1.0.2, consider validating and sanitizing user input to prevent malicious scripts from being injected and echoed back in error messages. As a temporary workaround, restrict the length of user requests to prevent long requests that may contain malicious scripts.

Exploit

Fix

Related Identifiers

CVE-2002-1453

Affected Products

Mywebserver

References · 6

• 🔥 https://exploit-db.com/exploits/21710 · Exploit
• 🔥 http://securityfocus.com/bid/5470 · Exploit
• 🔥 http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0077.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1453 · Security Note
• http://iss.net/security_center/static/9861.php · Note
• http://marc.info/?l=bugtraq&m=102935720109934&w=2 · Note