CVE-2004-2171

CVE-2004-2171 concerns the Cherokee web server. Multiple sources confirm a cross-site scripting (XSS) vulnerability in Cherokee before 0.4.8 , exploitable via the URL due to improper quoting in error pages. Affected software is Cherokee (pre-0.4.8); impact is ability for remote attackers to injec...

Cherokee Web Server Error Page XSS

The remote host is running Cherokee - a fast and tiny web server. The remote version of this software is vulnerable to cross-site scripting attacks due to lack of sanitization in returned error pages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...