Exploit GoAhead Web Server 2.1.x - Error Page Cross-Site Scripting

[Exploiter]

EDB-ID

21608

Проверка EDB

1. Пройдено

Автор

MATT MOORE

Тип уязвимости

REMOTE

Платформа

WINDOWS

CVE

cve-2002-0681

Дата публикации

2002-07-10

source: https://www.securityfocus.com/bid/5198/info

A vulnerability has been reported for GoAhead WebServer 2.1. Reportedly, it is possible for attackers to launch cross site scripting attacks against vulnerable systems.

GoAhead WebServer includes unsanitized requested URLs when displaying a 404 error page. An attacker may be able to trick a user into following a link which includes malicious script code, and executing the attack. 

GoAhead-server/SCRIPTalert(document.domain)/SCRIPT