CVE-2002-1008

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2002-10-04 · updated 2026-06-16

Description

Cross-site scripting vulnerability in PowerBASIC urlcount.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via a request to urlcount.cgi that contains the script, which is not filtered when the REPORT capability prints the original request.

Affected products

Summit Computer Networks Lil Http Server: 2.1, 2.2

References

http://archives.neohapsis.com/archives/bugtraq/2002-06/0332.html
http://archives.neohapsis.com/archives/bugtraq/2002-07/0072.html
http://www.iss.net/security_center/static/9445.php
http://www.securityfocus.com/bid/5115
http://archives.neohapsis.com/archives/bugtraq/2002-06/0332.html
http://archives.neohapsis.com/archives/bugtraq/2002-07/0072.html
http://www.iss.net/security_center/static/9445.php
http://www.securityfocus.com/bid/5115

Get alerted when CVE-2002-1008 or the next vulnerability affects your stack