Lucene search

K
cve[email protected]CVE-2002-0681
HistoryJul 23, 2002 - 4:00 a.m.

CVE-2002-0681

2002-07-2304:00:00
web.nvd.nist.gov
34
vulnerability
goahead web server
xss
remote attackers
script execution

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

High

0.07 Low

EPSS

Percentile

94.0%

Cross-site scripting vulnerability in GoAhead Web Server 2.1 allows remote attackers to execute script as other web users via script in a URL that generates a “404 not found” message, which does not quote the script.

Affected configurations

NVD
Node
goahead_softwaregoahead_webserverMatch2.1.1
OR
goahead_softwaregoahead_webserverMatch2.1.2
OR
goahead_softwaregoahead_webserverMatch2.1.3
OR
goahead_softwaregoahead_webserverMatch2.1.4
OR
goahead_softwaregoahead_webserverMatch2.1.5

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

High

0.07 Low

EPSS

Percentile

94.0%

Related for CVE-2002-0681