CVE-2002-1009

Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via the (1) "Name" or (2) "E-mail" parameters.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2002-10-04

Last modified

2024-08-08

Affected products

• Lil Http Server (Summit Computer Networks)

References

• http://archives.neohapsis.com/archives/bugtraq/2002-07/0112.html
• http://www.iss.net/security_center/static/9548.php
• http://www.securityfocus.com/bid/5211