20020930 XSS bug in Monkey (0.5.0) HTTP servermailing list
http://archives.neohapsis.com/archives/bugtraq/2002-09/0344.html CVE-2002-1852
Monkey HTTP Server 0.1/0.4/0.5 - Multiple Cross-Site Scripting Vulnerabilities
Record summary
CVE-2002-1852 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Cross-site scripting (XSS) vulnerability in Monkey 0.5.0 allows remote attackers to inject arbitrary web script or HTML via (1) the URL or (2) a parameter to test2.pl.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBMonkey HTTP Server 0.1/0.4/0.5 - Multiple Cross-Site Scripting VulnerabilitiesExploitDB exploitby DownBloadNot analyzed1 file
References
5monkey-url-test2pl-xss(10226)vdb entry
http://www.iss.net/security_center/static/10226.php monkey-url-request-xss(10229)vdb entry
http://www.iss.net/security_center/static/10229.php 5829vdb entry
http://www.securityfocus.com/bid/5829 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2002-1852