Cross-site scripting (XSS) vulnerability in Fastream NETFile Server 6.0.3.588 allows remote attackers to inject arbitrary web script or HTML via the URL, which is displayed on a "404 Not Found" error page.
References
| Link | Resource |
|---|---|
| http://secunia.com/advisories/10099 | Exploit Vendor Advisory |
| http://securitytracker.com/id?1008020 | Exploit Vendor Advisory |
| http://www.osvdb.org/2732 | Exploit Vendor Advisory |
| http://www.securityfocus.com/archive/1/342678 | Exploit Vendor Advisory |
| http://www.securityfocus.com/bid/8908 | Exploit Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/13535 | |
| http://secunia.com/advisories/10099 | Exploit Vendor Advisory |
| http://securitytracker.com/id?1008020 | Exploit Vendor Advisory |
| http://www.osvdb.org/2732 | Exploit Vendor Advisory |
| http://www.securityfocus.com/archive/1/342678 | Exploit Vendor Advisory |
| http://www.securityfocus.com/bid/8908 | Exploit Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/13535 |
Configurations
History
20 Nov 2024, 23:46
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://secunia.com/advisories/10099 - Exploit, Vendor Advisory | |
| References | () http://securitytracker.com/id?1008020 - Exploit, Vendor Advisory | |
| References | () http://www.osvdb.org/2732 - Exploit, Vendor Advisory | |
| References | () http://www.securityfocus.com/archive/1/342678 - Exploit, Vendor Advisory | |
| References | () http://www.securityfocus.com/bid/8908 - Exploit, Vendor Advisory | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/13535 - |
Information
Published : 2003-10-28 05:00
Updated : 2024-11-20 23:46
NVD link : CVE-2003-1151
Mitre link : CVE-2003-1151
CVE.ORG link : CVE-2003-1151
JSON object : View
Products Affected
fastream
- netfile_ftp_web_server
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')