CVE-2002-1008: Summit Computer Networks Lil HTTP Server

High severity, CVSS 7.5. EPSS: 7.1% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in PowerBASIC urlcount.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via a request to urlcount.cgi that contains the script, which is not filtered when the REPORT capability prints the original request.

Affected products

• Summit Computer Networks Lil HTTP Server: version 2.1 only; version 2.2 only

Published 2002-10-04. Last modified 2026-06-16.