Cross-site scripting (XSS) vulnerability in Bajie Java HTTP Server 0.95 through 0.95zxv4 allows remote attackers to inject arbitrary web script or HTML via (1) the query string to test.txt, (2) the guestName parameter to the custMsg servlet, or (3) the cookiename parameter to the CookieExample servlet.
References
| Link | Resource |
|---|---|
| http://secunia.com/advisories/10023 | Vendor Advisory |
| http://securityreason.com/securityalert/3306 | Exploit |
| http://www.geocities.com/gzhangx/websrv/docs/security.html | |
| http://www.securityfocus.com/archive/1/341452 | Exploit |
| http://www.securityfocus.com/bid/8841 | Exploit Patch |
| http://secunia.com/advisories/10023 | Vendor Advisory |
| http://securityreason.com/securityalert/3306 | Exploit |
| http://www.geocities.com/gzhangx/websrv/docs/security.html | |
| http://www.securityfocus.com/archive/1/341452 | Exploit |
| http://www.securityfocus.com/bid/8841 | Exploit Patch |
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:47
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://secunia.com/advisories/10023 - Vendor Advisory | |
| References | () http://securityreason.com/securityalert/3306 - Exploit | |
| References | () http://www.geocities.com/gzhangx/websrv/docs/security.html - | |
| References | () http://www.securityfocus.com/archive/1/341452 - Exploit | |
| References | () http://www.securityfocus.com/bid/8841 - Exploit, Patch |
Information
Published : 2003-12-31 05:00
Updated : 2024-11-20 23:47
NVD link : CVE-2003-1511
Mitre link : CVE-2003-1511
CVE.ORG link : CVE-2003-1511
JSON object : View
Products Affected
bajie
- java_http_server
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')