Cross-site scripting (XSS) vulnerability in Monkey 0.5.0 allows remote attackers to inject arbitrary web script or HTML via (1) the URL or (2) a parameter to test2.pl.
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
http://www.securityfocus.com/bid/5829 | vdb entry exploit |
http://www.iss.net/security_center/static/10229.php | vdb entry |
http://archives.neohapsis.com/archives/bugtraq/2002-09/0344.html | mailing list exploit vendor advisory |
http://www.iss.net/security_center/static/10226.php | vdb entry |