CVE-2002-1053

Cross-site scripting (XSS) vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows remote attackers to execute arbitrary script via a URL that contains a reference to a nonexistent host followed by the script, which is included in the resulting error message.

CVSS Metrics

Affected Products (1)

GitHub Security Advisory GHSA-6g3c-9q4h-j586

Cross-site scripting (XSS) vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows remote...

References (10)

• http://archives.neohapsis.com/archives/bugtraq/2002-08/0190.html
• http://www.iss.net/security_center/static/9914.php Patch, Vendor Advisory
• http://www.osvdb.org/4015
• http://www.securityfocus.com/bid/5506 Patch, Vendor Advisory
• http://www.w3.org/Jigsaw/RelNotes.html#2.2.1
• http://archives.neohapsis.com/archives/bugtraq/2002-08/0190.html
• http://www.iss.net/security_center/static/9914.php Patch, Vendor Advisory
• http://www.osvdb.org/4015
• http://www.securityfocus.com/bid/5506 Patch, Vendor Advisory
• http://www.w3.org/Jigsaw/RelNotes.html#2.2.1