CVE-2002-0326

Опубликовано: 25 июн. 2002

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Cross-site scripting vulnerability in BadBlue before 1.6.1 beta allows remote attackers to execute arbitrary script and possibly additional commands via a URL that contains Javascript.

Ссылки

http://marc.info/?l=bugtraq&m=101474387016066&w=2
http://www.iss.net/security_center/static/8294.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/4180
Patch
Vendor Advisory
http://marc.info/?l=bugtraq&m=101474387016066&w=2
http://www.iss.net/security_center/static/8294.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/4180
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:working_resources_inc.:badblue:1.2.7:*:*:*:*:*:*:*

cpe:2.3:a:working_resources_inc.:badblue:1.2.8:*:*:*:*:*:*:*

cpe:2.3:a:working_resources_inc.:badblue:1.5:*:*:*:*:*:*:*

cpe:2.3:a:working_resources_inc.:badblue:1.5.6_beta:*:*:*:*:*:*:*

cpe:2.3:a:working_resources_inc.:badblue:1.6.1_beta:*:*:*:*:*:*:*

EPSS

Процентиль: 72%

0.00717

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-5pwc-76rr-qpjq

github

почти 4 года назад