[] NeoSense

Herberlin BremsServer 1.2.4 - Cross-Site Scripting

Author: Donato Ferrante
type: remote
platform: multiple
port: 
date_added: 2004-01-26 
date_updated: 2016-09-06 
verified: 1 
codes: CVE-2004-2113;OSVDB-3754 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/9491/info

BremsServer has been reported to contain cross-site scripting vulnerabilities. This issue is due to the server failing to check or filter user strings that are sent to the server. An attacker may exploit these issues by creating a link that includes embedded malicious HTML and script code and enticing a user to follow it.

http://www.example.com/<script>alert("Test")</script>