7.5high
CVE-2001-09871 exploit
Cross-site scripting vulnerability in CGIWrap before 3.7 allows remote attackers to execute arbitrary Javascript on other web clients by ca…
Published 25 y ago · modified 4 mo ago · JSON
CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
7.2%
percentile 94%
Public exploits
1
Exploit-DB
Summary
Cross-site scripting vulnerability in CGIWrap before 3.7 allows remote attackers to execute arbitrary Javascript on other web clients by causing the Javascript to be inserted into error messages that are generated by CGIWrap.
Exploit prediction (EPSS)
7.18% probability of exploitation in the next 30 days, higher than 94% of all scored CVEs.
Exploits and detections
- EDB-21023 CGIWrap 2.x/3.x - Cross-Site Scripting · remote · 2001-07-22
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
- cgiwrap.sourceforge.net /changes.html · x_refsource_CONFIRM, x_transferred
- archives.neohapsis.com /archives/bugtraq/2001-07/0499.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
- osvdb.org /1909 · vdb-entry, x_refsource_OSVDB, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/6886 · vdb-entry, x_refsource_XF, x_transferred
- securityfocus.com /bid/3084 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2001-0987
- NVD: CVE-2001-0987
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.