full-disclosure - XSS in Null HTTPd

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <007901c252a1$65461820$e62d1c41@kc.rr.com>
From: mattmurphy at kc.rr.com (Matthew Murphy)
Subject: XSS in Null HTTPd

Null HTTPd is a simple HTTP server that runs on Win32/Unix systems.  It is
quite basic, but offers good CGI support.  A vulnerability in Null HTTPd may
allow cross-site scripting via a 404 page:

http://localhost/a?x=<SCRIPT>alert(document.URL)</SCRIPT>

You have to place this in the query string so that it doesn't get the
typical "%xx..." urlencode treatment from the browser.  If the code is
encoded in any way, it prevents the vulnerability from working.

"The reason the mainstream is thought
of as a stream is because it is
so shallow."
                     - Author Unknown