BBC Education Betsie 1.5 - Parserl.pl Cross-Site Scripting



EKU-ID: 27092 CVE: CVE-2002-1006;OSVDB-5031 OSVDB-ID:
Author: Mark Rowe Published: 2002-07-01 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


source: https://www.securityfocus.com/bid/5135/info

Betsie (BBC Education Text to Speech Internet Enhancer) is prone to a cross-site scripting vulnerability. This issue exists in the parserl.pl script.

Attackers may exploit this condition via a malicious link to a site running the vulnerable software. Successful exploitation will enable an attacker to cause script code to be executed in the web browser of a user who visits the malicious link.

http://server/cgi-bin/betsie/parserl.pl/<script>alert("eek!")</script>