CVE-2002-0681

Published: Jul 23, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Cross-site scripting vulnerability in GoAhead Web Server 2.1 allows remote attackers to execute script as other web users via script in a URL that generates a "404 not found" message, which does not quote the script.

Affected (5)

Products: Goahead Software: Goahead Webserver

Goahead Software

1 product

Goahead Webserver

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Goahead Software Goahead Webserver	Version 2.1.1
Goahead Software Goahead Webserver	Version 2.1.2
Goahead Software Goahead Webserver	Version 2.1.3
Goahead Software Goahead Webserver	Version 2.1.4
Goahead Software Goahead Webserver	Version 2.1.5

References (12)

http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0013.html

Source: cve@mitre.org

Vendor Advisory

http://freecode.com/projects/embedthis-goahead-webserver/releases/343539

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=102631742711795&w=2

Source: cve@mitre.org

http://osvdb.org/81099

Source: cve@mitre.org

http://www.iss.net/security_center/static/9518.php

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/5198

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0013.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://freecode.com/projects/embedthis-goahead-webserver/releases/343539

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=102631742711795&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/81099

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.iss.net/security_center/static/9518.php

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/5198

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

Timeline

No history available yet.