Cross site scripting

2010-06-1514:30:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.5%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Accoria Web Server (aka Rock Web Server) 1.4.7 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to the getenv sample program, (2) the desc parameter to loadstatic.cgi, (3) the name parameter to httpdcfg.cgi, or (4) the dns parameter to servercfg.cgi.

CPENameOperatorVersion
rock_web_servereq1.4.7

CPE	Name	Operator	Version
	rock_web_server	eq	1.4.7

References

www.kb.cert.org/vuls/id/245081

www.ioactive.com/pdfs/AccoriaWebServer.pdf