Exploitation Summary
EIP tracks 1 public exploit for CVE-2004-2102. PoCs published by Rafel Ivgi The-Insider.
AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in thttpd's CGI test script. It includes a proof-of-concept URL demonstrating how an attacker could inject malicious JavaScript code.
Description
Cross-site scripting (XSS) vulnerability in FREESCO 2.05, a modified version of thttpd, allows remote attackers to inject arbitrary web script or HTML via the test parameter.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by Rafel Ivgi The-Insider · textremotecgi
https://www.exploit-db.com/exploits/23582
The provided text describes a cross-site scripting (XSS) vulnerability in thttpd's CGI test script. It includes a proof-of-concept URL demonstrating how an attacker could inject malicious JavaScript code.
Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target:
thttpd (version not specified)
No auth needed
Prerequisites:
Access to a vulnerable thttpd server with the CGI test script enabled
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (2)
Core 2
Core References
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=107480309925905&w=2
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/14916
Scores
EPSS
0.0136
EPSS Percentile
68.0%
Details
Status
published
Published
Dec 31, 2004
Tracked Since
Feb 18, 2026