Description
Cross-site scripting (XSS) vulnerability in Response_default.html in 04WebServer 1.42 allows remote attackers to execute arbitrary web script or HTML via script code in the URL, which is not quoted in the resulting default error page.
References
- 11652 vdb-entry
- 04webserver-error-xss(18033) vdb-entry
- 20041110 04WebServer Three Vulnerabilities mailing-list
- http://www.soft3304.net/04WebServer/Security.html
- http://www.security.org.sg/vuln/04webserver142.html
- 20041115 Re: 04WebServer Three Vulnerabilities mailing-list
- 13159 third-party-advisory