Secunia

Donato Ferrante has discovered some vulnerabilities in Pegasi Web Server, which can be exploited to conduct cross-site scripting and directory traversal attacks.

1) Missing sanitation of HTTP requests can be exploited to access arbitrary files outside the web root by including the classic directory traversal character sequence in a URL.

Example:
http://[victim]:8080/../../[existing_file]

2) User input in HTTP requests is included in error responses without prior sanitation. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

Example:
http://[host]:8080/<script>alert(document.domain)</script>

The vulnerabilities have been reported in version 0.2.2. Prior versions may also be affected.

Solution
Update to version 0.2.3:
Further details available in Customer Area

Provided and/or discovered by
Donato Ferrante

Original Advisory
http://www.autistici.org/fdonato/advisory/pws0.2.2-adv.txt

Deep Links
Links available in Customer Area