CVE-2002-0257

Опубликовано: 29 мая 2002

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Cross-site scripting vulnerability in auction.pl of MakeBid Auction Deluxe 3.30 allows remote attackers to obtain information from other users via the form fields (1) TITLE, (2) DESCTIT, (3) DESC, (4) searchstring, (5) ALIAS, (6) EMAIL, (7) ADDRESS1, (8) ADDRESS2, (9) ADDRESS3, (10) PHONE1, (11) PHONE2, (12) PHONE3, or (13) PHONE4.

Ссылки

http://marc.info/?l=bugtraq&m=101328880521775&w=2
http://www.iss.net/security_center/static/8161.php
Patch
Vendor Advisory
http://www.netcreations.addr.com/dcforum/DCForumID2/126.html
http://www.securityfocus.com/bid/4069
Patch
Vendor Advisory
http://marc.info/?l=bugtraq&m=101328880521775&w=2
http://www.iss.net/security_center/static/8161.php
Patch
Vendor Advisory
http://www.netcreations.addr.com/dcforum/DCForumID2/126.html
http://www.securityfocus.com/bid/4069
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:http_server:1.3.17:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.18:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.19:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.20:*:*:*:*:*:*:*

cpe:2.3:a:apache:http_server:1.3.22:*:*:*:*:*:*:*

cpe:2.3:a:usanet_creations:makebid_auction_deluxe:3.30:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.06648

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-cp75-277r-65xg

github

почти 4 года назад