CVE-2002-1009: Summit Computer Networks Lil HTTP Server

High severity, CVSS 7.5. EPSS: 7% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via the (1) "Name" or (2) "E-mail" parameters.

Affected products

• Summit Computer Networks Lil HTTP Server: version 2.1 only; version 2.2 only

Published 2002-10-04. Last modified 2026-06-16.