Cross-site scripting vulnerability in thttpd 2.20 and earlier allows remote attackers to execute arbitrary script via a URL to a nonexistent page, which causes thttpd to insert the script into a 404 error message.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Thttpd | Acme_labs | 2.20b (including) | 2.20b (including) |