CVE-2008-1283

CVE-2008-1283 describes a cross-site scripting (XSS) vulnerability in Neptune Web Server 3.0. The issue arises from how the server handles the URI when generating the 404 error page, allowing remote attackers to inject arbitrary web script or HTML that could be executed in a user’s browser. The a...

Neptune Web Server crossite scripting

Crossite scriptign with error page...

XSS in Neptune Web Server

//////XSS in Neptune Web Server //404 error page is vulnerable to XSS //http://www.silver-forge.com/ // //////Tested on: //Neptune Web Server 3.0 Professional Edition // ////////Author: //NetJackal //http://netjackal.by.ru //http://hackerz.ir // ////////PoC: //http://victim.net/XSS...

Neptune Web Server 3.0 - 404 Error Page Cross-Site Scripting

Neptune Web Server 3.0 - 404 Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/28148/info Neptune Web Server is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

Neptune Web Server 3.0 - 404 Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/28148/info Neptune Web Server is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...