CVE-2011-4273

GoAhead Web Server 2.18 - 'addgroup.asp?group' Cross-Site Scripting

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2011-4273 has a selected CVSS score of 4.3; EIP currently links 3 catalogued exploits.

Description

Multiple cross-site scripting (XSS) vulnerabilities in GoAhead Webserver 2.18 allow remote attackers to inject arbitrary web script or HTML via (1) the group parameter to goform/AddGroup, related to addgroup.asp; (2) the url parameter to goform/AddAccessLimit, related to addlimit.asp; or the (3) user (aka User ID) or (4) group parameter to goform/AddUser, related to adduser.asp.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
3

Proofs of concept

3

Catalogued exploits

ExploitDBGoAhead Web Server 2.18 - 'addgroup.asp?group' Cross-Site ScriptingExploitDB exploitby Silent DreamNot analyzed1 file
ExploitDB
PoC details
ExploitDBGoAhead Web Server 2.18 - 'addlimit.asp?url' Cross-Site ScriptingExploitDB exploitby Silent DreamNot analyzed1 file
ExploitDB
PoC details
ExploitDBGoAhead Web Server 2.18 - 'adduser.asp' Multiple Cross-Site Scripting VulnerabilitiesExploitDB exploitby Silent DreamNot analyzed1 file
ExploitDB
PoC details

References

4