CVE-2002-2318

Blueface Falcon Web Server - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote attackers to inject arbitrary web script or HTML via the URI, which is inserted into 301 error messages and executed by 404 error messages.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Matt Murphy · textremotewindows

https://www.exploit-db.com/exploits/21698

View Code ZIP pw:eip

References (4)

[Exploit] http://seclists.org/lists/bugtraq/2002/Aug/0158.html

[Exploit] http://www.securityfocus.com/bid/5435

[Mailing List] http://lists.grok.org.uk/pipermail/full-disclosure/2002-August/000934.html

[Third Party Advisory] http://www.iss.net/security_center/static/9812.php

Scores

EPSS 0.0056

EPSS Percentile 68.1%

Classification

CWE

CWE-79

Status draft

Affected Products (4)

blueface/falcon_web_server

Timeline

Published Dec 31, 2002

Tracked Since Feb 18, 2026