SecuritySpace - CVE-2011-4273

Vulnerability Search		Search 324607 CVE descriptions and 146377 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2011-4273

Description: Multiple cross-site scripting (XSS) vulnerabilities in GoAhead Webserver 2.18 allow remote attackers to inject arbitrary web script or HTML via (1) the group parameter to goform/AddGroup, related to addgroup.asp; (2) the url parameter to goform/AddAccessLimit, related to addlimit.asp; or the (3) user (aka User ID) or (4) group parameter to goform/AddUser, related to adduser.asp.

Test IDs: 1.3.6.1.4.1.25623.1.0.802270

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2011-4273
CERT/CC vulnerability note: VU#384427
http://www.kb.cert.org/vuls/id/384427
http://secunia.com/advisories/46894
XForce ISS Database: goahead-multiple-xss(70434)
https://exchange.xforce.ibmcloud.com/vulnerabilities/70434

CVE ID:	CVE-2011-4273
Description:	Multiple cross-site scripting (XSS) vulnerabilities in GoAhead Webserver 2.18 allow remote attackers to inject arbitrary web script or HTML via (1) the group parameter to goform/AddGroup, related to addgroup.asp; (2) the url parameter to goform/AddAccessLimit, related to addlimit.asp; or the (3) user (aka User ID) or (4) group parameter to goform/AddUser, related to adduser.asp.
Test IDs:	1.3.6.1.4.1.25623.1.0.802270
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2011-4273 CERT/CC vulnerability note: VU#384427 http://www.kb.cert.org/vuls/id/384427 http://secunia.com/advisories/46894 XForce ISS Database: goahead-multiple-xss(70434) https://exchange.xforce.ibmcloud.com/vulnerabilities/70434