CVE-2002-0681: GoAhead Software GoAhead Webserver

High severity, CVSS 7.5. EPSS: 8.3% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in GoAhead Web Server 2.1 allows remote attackers to execute script as other web users via script in a URL that generates a "404 not found" message, which does not quote the script.

Affected products

• GoAhead Software GoAhead Webserver: version 2.1.1 only; version 2.1.2 only; version 2.1.3 only; version 2.1.4 only; version 2.1.5 only

Published 2002-07-23. Last modified 2026-06-16.