CVE

Id
5396  
CVE No.
CVE-2002-1008  
Status
Candidate  
Description
Cross-site scripting vulnerability in PowerBASIC urlcount.cgi, as included in Lil" HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via a request to urlcount.cgi that contains the script, which is not filtered when the REPORT capability prints the original request.  
Phase
Proposed (20020830)  
Votes
ACCEPT(2) Frech, Green | NOOP(4) Cole, Cox, Foat, Wall  
Comments
Green> PUBLISHER"S WEBSITE INDICATES SECURITY FIXES  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
29092 5396 CVE-2002-1008 BUGTRAQ:20020626 ALERT: Lil"HTTP Server (Summit Computer Networks)  View
29093 5396 CVE-2002-1008 URL:http://archives.neohapsis.com/archives/bugtraq/2002-06/0332.html  View
29094 5396 CVE-2002-1008 BUGTRAQ:20020708 Technical Details of Urlcount.cgi Vulnerability  View
29095 5396 CVE-2002-1008 URL:http://archives.neohapsis.com/archives/bugtraq/2002-07/0072.html  View
29096 5396 CVE-2002-1008 XF:lilhttp-report-urlcount-xss(9445)  View
29097 5396 CVE-2002-1008 URL:http://www.iss.net/security_center/static/9445.php  View
29098 5396 CVE-2002-1008 BID:5115  View

Related JVN