Lucene search
HistoryOct 04, 2002 - 4:00 a.m.
CVE-2002-1009
cve
2002
1009
cross-site scripting
powerbasic
pbcgi.cgi
lil' http web server
remote attackers
web script
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
High
0.031 Low
EPSS
Percentile
91.1%
Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil’ HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via the (1) “Name” or (2) “E-mail” parameters.
Affected configurations
Node
summit_computer_networkslil_http_serverMatch2.1
ORsummit_computer_networkslil_http_serverMatch2.2
Related
cvelist
cvelist
CVE-2002-1009
2002-08-31 04:00:00
nvd
nvd
CVE-2002-1009
2002-10-04 04:00:00
openvas
openvas
Lil' HTTP Server <= 2.2 XSS Vulnerability - Active Check
2011-06-02 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
High
0.031 Low
EPSS
Percentile
91.1%
Related for CVE-2002-1009