CVE-2001-1157

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Baltimore Technologies WEBsweeper 4.0 and 4.02 does not properly filter Javascript from HTML pages, which could allow remote attackers to bypass the filtering via (1) an extra leading < and one or more characters before the SCRIPT tag, or (2) tags using Unicode.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/archive/1/203821Vendor Advisory
http://www.securityfocus.com/bid/3172Vendor Advisory
http://www.securityfocus.com/bid/3173Vendor Advisory
http://www.securityfocus.com/archive/1/203821Vendor Advisory
http://www.securityfocus.com/bid/3172Vendor Advisory
http://www.securityfocus.com/bid/3173Vendor Advisory

Timeline

Published: Aug 12, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-11587.5Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, accept_fw1_rdp, which can allow remote attackers to bypass intended rest CVE-2001-11597.5load_prefs.php and supporting include files in SquirrelMail 1.0.4 and earlier do not properly initialize certain PHP variables, which allows CVE-2001-11607.5udirectory.pl in Microburst Technologies uDirectory 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metachar CVE-2001-11617.5Cross-site scripting (CSS) vulnerability in Lotus Domino 5.0.6 allows remote attackers to execute script on other web clients via a URL that CVE-2001-116210.0Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remote attackers to overw CVE-2001-116310.0Buffer overflow in Munica Corporation NetSQL 1.0 allows remote attackers to execute arbitrary code via a long CONNECT argument to port 6500.CVE-2001-11647.2Buffer overflow in uucp utilities in UnixWare 7 allows local users to execute arbitrary code via long command line arguments to (1) uucp, (2 CVE-2001-11654.6Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which allows local users to gain privileges by decrypting CVE-2001-11665.0linprocfs on FreeBSD 4.3 and earlier does not properly restrict access to kernel memory, which allows one process with debugging rights on a CVE-2001-11685.0Directory traversal vulnerability in index.php in PhpMyExplorer before 1.2.1 allows remote attackers to read arbitrary files via a ..%2F (mo CVE-2001-11697.5keyinit in S/Key does not require authentication to initialize a one-time password sequence, which allows an attacker who has gained privile CVE-2001-11705.0AmTote International homebet program stores the homebet.log file in the homebet/ virtual directory, which allows remote attackers to steal a