https://www.exploit-db.com/exploits/22083
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200212-852

VisNeticWebsite3.5.15之前版本存在跨站脚本攻击(XSS)漏洞。远程攻击者借助指向不存在页面的HTTP引用头注入任意web脚本或HTML。该漏洞导致注入404错误页面。

source: http://www.securityfocus.com/bid/6369/info

A vulnerability has been discovered in VisNetic Website when generating a 404 page for a non-existent resources. The issue is due to insufficient sanitization of the HTTP 'referer' header. It is possible to cause arbitrary code to be executed within the context of the visited 404 page by embedding script code into the HTTP 'referer' header.

An attacker could exploit this issue to steal cookie-based authentication credentials which could be used to hijack a legitimate users session.

It should be noted that this vulnerability was discovered in VisNetic WebSite 3.5.13.1. It is not yet known whether this issue also affects earlier versions.

GET /NonExistentPage.html HTTP/1.0
Host: TARGET
Accept: */*
Accept-Language: en-us
User-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)
Referer: "></a><script>alert('Cross Site Scripting')</script>

来源:BID
名称:6369
链接:http://www.securityfocus.com/bid/6369
来源:XF
名称:visnetic-website-referer-xss(10852)
链接:http://xforce.iss.net/xforce/xfdb/10852
来源:www.deerfield.com
链接:http://www.deerfield.com/products/visnetic_website/
来源:BUGTRAQ
名称:20021212VisNeticWebSiteXSSvulnerabilitythroughHTTPrefererheader
链接:http://archives.neohapsis.com/archives/bugtraq/2002-12/0113.html