CVE-2002-0733

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

8.03%

Published

Aug 12, 2002

Modified

Jun 16, 2026

Public PoC / Exploit (1)

All weaponized →

Exploit-DBACME Labs thttpd 2.20 - Cross-Site Scripting

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting vulnerability in thttpd 2.20 and earlier allows remote attackers to execute arbitrary script via a URL to a nonexistent page, which causes thttpd to insert the script into a 404 error message.

Affected Products (1)

acme_labs · thttpdvulnerable

References (12)

http://archives.neohapsis.com/archives/vuln-dev/2002-q2/0155.html

Vendor Advisory

http://www.acme.com/software/thttpd/#releasenotes

http://www.ifrance.com/kitetoua/tuto/5holes1.txt

http://www.iss.net/security_center/static/9029.php

Vendor Advisory

http://www.osvdb.org/5125

http://www.securityfocus.com/bid/4601

ExploitVendor Advisory

http://archives.neohapsis.com/archives/vuln-dev/2002-q2/0155.html

Vendor Advisory

http://www.acme.com/software/thttpd/#releasenotes

http://www.ifrance.com/kitetoua/tuto/5holes1.txt

http://www.iss.net/security_center/static/9029.php

Vendor Advisory

http://www.osvdb.org/5125

http://www.securityfocus.com/bid/4601

ExploitVendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs