Herberlin BremsServer 1.2.4 - Cross-Site Scripting
Author: Donato Ferrante
type: remote
platform: multiple
port:
date_added: 2004-01-26
date_updated: 2016-09-06
verified: 1
codes: CVE-2004-2113;OSVDB-3754
tags:
aliases:
screenshot_url:
application_url:
source: https://www.securityfocus.com/bid/9491/info
BremsServer has been reported to contain cross-site scripting vulnerabilities. This issue is due to the server failing to check or filter user strings that are sent to the server. An attacker may exploit these issues by creating a link that includes embedded malicious HTML and script code and enticing a user to follow it.
http://www.example.com/<script>alert("Test")</script>