CVE-2010-2267

CVE-2010-2267 affects Accoria Web Server (aka Rock Web Server) 1.4.7. The vulnerability is described as multiple cross-site scripting (XSS) flaws, exploitable by remote attackers to inject arbitrary web script or HTML via: (1) the query string to the getenv sample program, (2) the desc parameter ...