NVD

Id
78278  
Name
CVE-2001-0835  
Description
Cross-site scripting vulnerability in Webalizer 2.01-06, and possibly other versions, allows remote attackers to inject arbitrary HTML tags by specifying them in (1) search keywords embedded in HTTP referrer information, or (2) host names that are retrieved via a reverse DNS lookup.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2001-12-06  
Modified Date
2016-10-17  
Seq
2001-0835  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
391604 78278 CVE-2001-0835 SuSE-SA:2001:040  View
391605 78278 CVE-2001-0835 20011024 Cross-site Scripting Flaw in webalizer  View
391606 78278 CVE-2001-0835 ESA-20011101-01  View
391607 78278 CVE-2001-0835 http://www.mrunix.net/webalizer/news.html  View
391608 78278 CVE-2001-0835 RHSA-2001:140  View
391609 78278 CVE-2001-0835 RHSA-2001:141  View
391610 78278 CVE-2001-0835 3473  View
391611 78278 CVE-2001-0835 webalizer-html-tag-host(7350)  View
391612 78278 CVE-2001-0835 webalizer-html-tags-keywords(7351)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
64188 JVNDB-2001-000162 Red hat Linux の webalizer におけるクロスサイトスクリプティングの脆弱性 Red hat Linux の webalizer において、ホスト名やキーワードに悪意のあるタグが挿入されていると、悪意のあるコードの実行を許可してしまう脆弱性が存在します。 CVE-2001-0835 3641 CVE-2001-0835 78278 7.5 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000162.html 2001-10-23 2007-04-01 View