Authoria HR Suite - 'AthCGI.exe' Cross-Site Scripting

Author: Max
type: webapps
platform: cgi
port: 
date_added: 2002-10-09 
date_updated: 2012-10-12 
verified: 1 
codes: CVE-2002-2348;OSVDB-58958 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/5932/info

Authoria HR Suite is prone to cross-site scripting attacks.

An attacker could construct a malicious link to a vulnerable host that contains arbitrary HTML and script code. If this link is visited by a web user, the attacker-supplied code will be rendered in their browser, in the security context of the vulnerable site.

https://www.example.com/path.to/cgi-bin/athcgi.exe?command=showpage&script='],[0,0]];alert('test!');a=[['