CVE-2011-4273

EPSS 4.8%

Multiple cross-site scripting (XSS) vulnerabilities in GoAhead Webserver 2.18 allow remote attackers to inject arbitrary web script or HTML via (1) the group parameter to goform/AddGroup, related to addgroup.asp; (2) the url parameter to goform/AddAccessLimit, related to addlimit.asp; or the (3) user (aka User ID) or (4) group parameter to goform/AddUser, related to adduser.asp.

Affected products

n/a · n/a

public PoCs found — 3

exploitdbwww.exploit-db.com/exploits/36217unverified exploitdbwww.exploit-db.com/exploits/36218unverified exploitdbwww.exploit-db.com/exploits/36219unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/46894 https://exchange.xforce.ibmcloud.com/vulnerabilities/70434 http://www.kb.cert.org/vuls/id/384427