Lucene search

K

Pegasi Web Server 0.2.2 - Error Page Cross-Site Scripting

๐Ÿ—“๏ธย 11 Mar 2004ย 00:00:00Reported byย Donato FerranteTypeย 
exploitpack
ย exploitpack
๐Ÿ‘ย 7ย Views

Pegasi Web Server 0.2.2 - Error Page Cross-Site Scripting

Show more
Code
source: https://www.securityfocus.com/bid/9847/info
 
Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks. A successful cross-site scripting attack may make it possible for an attacker to create a malicious link to a vulnerable site that includes hostile HTML and script code. This code may be rendered in the browser of a victim user who visits the malicious link and this will occur in the security context of the site hosting the software. The directory traversal vulnerability may allow a malicious user to request files outside of the web-server root directory with directory traversal strings such as '../'.
 
Pegasi Web Server version 0.2.2 has been reported to be prone to these issues, however, it is possible that other versions are affected as well.

http://www.example.com/<script>alert("Test")</script>

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contactย us for a demo andย discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
11 Mar 2004 00:00Current
6.8Medium risk
Vulners AI Score6.8
7
.json
Report