CVE-2002-0733

thttpd <= 2.20 - Cross-Site Scripting via 404 Error Page

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2002-0733. PoCs published by frog.

AI-analyzed exploit summary The provided text describes a Cross-Site Scripting (XSS) vulnerability in thttpd versions up to 2.20b. The vulnerability arises from insufficient URL sanitization when generating error pages, allowing script injection.

Description

Cross-site scripting vulnerability in thttpd 2.20 and earlier allows remote attackers to execute arbitrary script via a URL to a nonexistent page, which causes thttpd to insert the script into a 404 error message.

Exploits (1)

exploitdb WRITEUP VERIFIED

by frog · textremotelinux

https://www.exploit-db.com/exploits/21422

View Code ZIP pw:eip

The provided text describes a Cross-Site Scripting (XSS) vulnerability in thttpd versions up to 2.20b. The vulnerability arises from insufficient URL sanitization when generating error pages, allowing script injection.

Classification

Writeup 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Reliable

Target: thttpd 2.20b

No auth needed

Prerequisites: A vulnerable version of thttpd · Ability to craft a malicious URL

MITRE ATT&CK