Secunia

A vulnerability has been reported in OmniHTTPd, which can be exploited by malicious people to conduct Cross-Site Scripting attacks against visitors.

The vulnerability is caused due to missing input validation in the sample files "cgi-win/test-win.exe" and "cgi-bin/minimal.pl". This can be exploited by creating a malicious link including script code, which will be executed in a user's browser when the link is clicked or a malicious web site is visited.

Successful exploitation may result in disclosure of various information (eg. cookie-based authentication information) associated with the site running OmniHTTPd or inclusion of malicious content, which the user thinks is part of the real website.

Examples:
http://[victim]/cgi-bin/minimal.pl?<script>alert(document.cookie)</script>
http://[victim]/cgi-win/test-win.exe?<script>alert("p0wned!")</script>

The vulnerability has been reported in version 2.10. However, prior versions may also be affected.

Solution
Remove the affected files.

Provided and/or discovered by
Dr_Insane

Original Advisory
http://members.lycos.co.uk/r34ct/main/omniHTTPD2.10xss.txt

Deep Links
Links available in Customer Area