Lucene search

K
exploitdbMark RoweEDB-ID:21587
HistoryJul 01, 2002 - 12:00 a.m.

BBC Education Betsie 1.5 - Parserl.pl Cross-Site Scripting

2002-07-0100:00:00
Mark Rowe
www.exploit-db.com
26

AI Score

7.4

Confidence

Low

source: https://www.securityfocus.com/bid/5135/info

Betsie (BBC Education Text to Speech Internet Enhancer) is prone to a cross-site scripting vulnerability. This issue exists in the parserl.pl script.

Attackers may exploit this condition via a malicious link to a site running the vulnerable software. Successful exploitation will enable an attacker to cause script code to be executed in the web browser of a user who visits the malicious link. 

http://server/cgi-bin/betsie/parserl.pl/<script>alert("eek!")</script> 

AI Score

7.4

Confidence

Low

Related for EDB-ID:21587