CVE-2002-1009

Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via the (1) "Name" or (2) "E-mail" parameters.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

7.02% chance of exploitation in the next 30 days, 94th percentile

Published

2002-08-31

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/21611

References

• CVE Record
• NVD entry

Related

• CVE-2002-1008
• CVE-2002-1013
• CVE-2002-1007
• CVE-2002-1014
• CVE-2002-1006
• CVE-2002-1016