20020925 IIL Advisory: Vulnerabilities in acWEB HTTP servermailing list
http://archives.neohapsis.com/archives/bugtraq/2002-09/0304.html CVE-2002-2171
ACWeb 1.14/1.8 - Cross-Site Scripting
Record summary
CVE-2002-2171 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Cross-site scripting (XSS) vulnerability in acWEB 1.8 and 1.14 allows remote attackers to insert arbitrary HTML and web script via a URL, possibly via a "%db" request in a URL.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBACWeb 1.14/1.8 - Cross-Site ScriptingExploitDB exploitby DownBloadNot analyzed1 file
References
4acweb-xss(10191)vdb entry
http://www.iss.net/security_center/static/10191.php 5793vdb entry
http://www.securityfocus.com/bid/5793 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2002-2171