CVE-2002-0771

Опубликовано: 12 авг. 2002

Источник: nvd

CVSS2: 6.4

EPSS Низкий

Описание

Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script and steal cookies via the (1) cvsroot or (2) sortby parameters.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2002-05/0161.html
Patch
Vendor Advisory
http://www.iss.net/security_center/static/9112.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/4818
Exploit
Patch
Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-05/0161.html
Patch
Vendor Advisory
http://www.iss.net/security_center/static/9112.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/4818
Exploit
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:viewcvs:viewcvs:0.8:*:*:*:*:*:*:*

cpe:2.3:a:viewcvs:viewcvs:0.9:*:*:*:*:*:*:*

cpe:2.3:a:viewcvs:viewcvs:0.9.1:*:*:*:*:*:*:*

cpe:2.3:a:viewcvs:viewcvs:0.9.2:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.08223

Низкий

6.4 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2002-0771

debian

около 23 лет назад

Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 al ...

GHSA-cwgj-7729-8jcv

github

больше 3 лет назад