exploits , vulnerabilities , articles , Acme thttpd CGI Test Script Cross-Site Scripting Vulnerability

Title	Acme thttpd CGI Test Script Cross-Site Scripting Vulnerability
Published	2004-01-22-12:00AM
Updated	2004-01-22-07:34PM
Class	Input Validation Error
CVE	CVE-MAP-NOMATCH
Remote	Yes
Local	No
Credit	Discovery is credited to "Rafel Ivgi, The-Insider" <theinsider@012.net.il>.
Vulnerable	Acme thttpd 2.0.5 FREESCO FREESCO 0.2.7 FREESCO FREESCO 0.3 .0 FREESCO FREESCO 0.3.1 FREESCO FREESCO 0.3.2 Acme thttpd 2.0.4 S.u.S.E. Linux 6.2 S.u.S.E. Linux 6.3 Acme thttpd 2.0.3 Acme thttpd 2.0.2 Acme thttpd 2.0.1 Acme thttpd 2.0 Acme thttpd 1.95 Acme thttpd 1.90 a Acme thttpd 1.0
Not Vulnerable
Code	The following example was provided: http://www.example.com/cgi/example?test=<script>alert('xss')</script>
TXT

Vulnerabilities - newest 10 RSS | More

• 2008-08-29 NetBSD PPPoE Discovery Packet Remote Denial of Service Vulnerability
• 2008-08-29 Civic Website Manager Multiple Cross-Site Scripting Vulnerabilities
• 2008-08-29 AN Guestbook Unspecified Cross-Site Scripting Vulnerabilities
• 2008-08-29 TIBCO Hawk Multiple Remote Buffer Overflow Vulnerabilities
• 2008-08-29 Samba Group Mappings File Insecure Permissions Local Security Vulnerability
• 2008-08-29 Intel System Management Mode Local Privilege Escalation Vulnerability
• 2008-08-29 Crafty Syntax Live Help Multiple SQL Injection Vulnerabilities
• 2008-08-28 NoName Script Multiple Remote Vulnerabilities
• 2008-08-28 GPicView Multiple Local Security Vulnerabilities
• 2008-08-28 ezContents CMS Multiple Local File Include Vulnerabilities

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Fri, 29 Aug 2008 06:10:33 +0000