CVE-2002-0681

Cross-site scripting vulnerability in GoAhead Web Server 2.1 allows remote attackers to execute script as other web users via script in a URL that generates a "404 not found" message, which does not quote the script.

Cross-site scripting vulnerability in GoAhead Web Server 2.1 allows remote attackers to execute script as other web users via script in a URL that generates a "404 not found" message, which does not quote the script.

Vulnerabilidad de secuencias de comandos en sitios cruzados (cross-site scripting) en GoAhead Web Server 2.1 permite a atacantes remotos ejecutar secuencias de comandos como otros usuarios web mediante un script en una URL que genera un mensaje "404 no encontrado", que no le pone comillas al script.