CVE-2002-0733

Acme Labs Thttpd - XSS

Title source: rule

Description

Cross-site scripting vulnerability in thttpd 2.20 and earlier allows remote attackers to execute arbitrary script via a URL to a nonexistent page, which causes thttpd to insert the script into a 404 error message.

Exploits (1)

exploitdb WRITEUP VERIFIED
by frog · textremotelinux
https://www.exploit-db.com/exploits/21422

Scores

EPSS 0.0959
EPSS Percentile 92.8%

Classification

Status draft

Affected Products (1)

acme_labs/thttpd

Timeline

Published Aug 12, 2002
Tracked Since Feb 18, 2026