Description
Cross-site scripting (XSS) vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows remote attackers to execute arbitrary script via a URL that contains a reference to a nonexistent host followed by the script, which is included in the resulting error message.
References
- 4015 vdb-entry
- 20020817 W3C Jigsaw Proxy Server: Cross-Site Scripting Vulnerability (REPOST) mailing-list
- jigsaw-http-proxy-xss(9914) vdb-entry
- 5506 vdb-entry
- http://www.w3.org/Jigsaw/RelNotes.html#2.2.1