CVE-2002-0731

vqserver - Cross-Site Scripting via Demo Script Arguments

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2002-0731. PoCs published by Matthew Murphy.

AI-analyzed exploit summary This exploit demonstrates a cross-site scripting (XSS) vulnerability in vqServer's default CGI scripts. The PoC shows how arbitrary script code can be injected into a URL, which is then executed in the context of the user's browser.

Description

Cross-site scripting vulnerability in demonstration scripts for vqServer allows remote attackers to execute arbitrary script via a link that contains the script in arguments to demo scripts such as respond.pl.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Matthew Murphy · textwebappscgi
https://www.exploit-db.com/exploits/21411

This exploit demonstrates a cross-site scripting (XSS) vulnerability in vqServer's default CGI scripts. The PoC shows how arbitrary script code can be injected into a URL, which is then executed in the context of the user's browser.

Classification
Working Poc 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: vqServer (version not specified)
No auth needed
Prerequisites: vqServer with default CGI scripts enabled
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Vendor Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/8935.php
Exploit, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/4573
Exploit, Vendor Advisory mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2002-04/0313.html

Scores

EPSS 0.0272
EPSS Percentile 84.1%

Details

Status published
Products (4)
vqsoft/vqserver 1.9
vqsoft/vqserver 1.9.30
vqsoft/vqserver 1.9.47
vqsoft/vqserver 1.9.55
Published Aug 12, 2002
Tracked Since Feb 18, 2026