Unquoted script code in 04WebServer 1.42 allows for remote execution of arbitrary web script or HTML

CVE-2004-1512 · MEDIUM Severity

AV:N/AC:M/AU:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in Response_default.html in 04WebServer 1.42 allows remote attackers to execute arbitrary web script or HTML via script code in the URL, which is not quoted in the resulting default error page.

Learn more about our Web App Pen Testing.