Unscored CVE-2002-2378 EUVD-2002-2356GHSA-mw24-9hgh-hwg4

Cross-site scripting (XSS) vulnerability in AN HTTP 1.41d allows remote attackers to inject arbitrary web script or HTML via a colon (:) in…

Published Oct 31, 2007 · Updated Sep 16, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in AN HTTP 1.41d allows remote attackers to inject arbitrary web script or HTML via a colon (:) in the query string, which is inserted into the resulting error page.

References

6054 vdb-entry
20021028 [SNS Advisory No.57] AN HTTPD Cross-site Scripting Vulnerability mailing-list
an-http-colon-xss(10487) vdb-entry