Cross-site scripting (XSS) vulnerability in Response_default.html in 04WebServer 1.42 allows remote attackers to execute arbitrary web script or HTML via script code in the URL, which is not quoted in the resulting default error page.Referenceshttp://www.securityfocus.com/bid/11652https://exchange.xforce.ibmcloud.com/vulnerabilities/18033http://marc.info/?l=bugtraq&m=110012542615484&w=2http://www.soft3304.net/04WebServer/Security.htmlhttp://www.security.org.sg/vuln/04webserver142.htmlhttp://marc.info/?l=bugtraq&m=110054395311823&w=2http://secunia.com/advisories/13159/