IBM Edge Components Caching Proxy suffers from a cross site scripting vulnerability.
68d588eb54e653728e1f9f5cccf167d8113243b81dee38b4e767517c4b58bce8
Rapid7 probably found this vulnerability on October 23 2002
http://seclists.org/fulldisclosure/2002/Oct/330 and its called CVE-
2002-1167
They don't show the output and specify it is error message but the
injection method is the same. The update is it works on IBM Edge
Components Caching Proxy - International English Edition 6.0.2
Reproduce by request nonexistant host and seeing it reflected in error
message -
GET http://server/"<script>alert('NOHUGS')</script> HTTP/1.0
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed