Cross-site scripting vulnerability in demonstration scripts for vqServer allows remote attackers to execute arbitrary script via a link that contains the script in arguments to demo scripts such as respond.pl.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Vqserver | Vqsoft | 1.9 (including) | 1.9 (including) |
| Vqserver | Vqsoft | 1.9.30 (including) | 1.9.30 (including) |
| Vqserver | Vqsoft | 1.9.47 (including) | 1.9.47 (including) |
| Vqserver | Vqsoft | 1.9.55 (including) | 1.9.55 (including) |
References
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0313.html
- http://www.iss.net/security_center/static/8935.php
- http://www.securityfocus.com/bid/4573
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0313.html
- http://www.iss.net/security_center/static/8935.php
- http://www.securityfocus.com/bid/4573