CVE-2002-1785

Опубликовано: 31 дек. 2002

Источник: nvd

CVSS2: 1.9

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in Zeus Administration Server in Zeus Web Server 4.0 through 4.1r2 allows remote authenticated users to inject arbitrary web script or HTML via the section parameter to index.fcgi.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2002-11/0104.html
Exploit
Vendor Advisory
http://online.securityfocus.com/archive/1/302961
Exploit
Vendor Advisory
http://www.iss.net/security_center/static/10567.php
http://www.securityfocus.com/bid/6144
Exploit
Patch
http://archives.neohapsis.com/archives/bugtraq/2002-11/0104.html
Exploit
Vendor Advisory
http://online.securityfocus.com/archive/1/302961
Exploit
Vendor Advisory
http://www.iss.net/security_center/static/10567.php
http://www.securityfocus.com/bid/6144
Exploit
Patch

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:zeus_technologies:zeus_web_server:4.0:*:*:*:*:*:*:*

cpe:2.3:a:zeus_technologies:zeus_web_server:4.1:*:*:*:*:*:*:*

cpe:2.3:a:zeus_technologies:zeus_web_server:4.1_r1:*:*:*:*:*:*:*

cpe:2.3:a:zeus_technologies:zeus_web_server:4.1_r2:*:*:*:*:*:*:*

cpe:2.3:a:zeus_technologies:zeus_web_server:4.1_r3:*:*:*:*:*:*:*

cpe:2.3:a:zeus_technologies:zeus_web_server:4.1_r4:*:*:*:*:*:*:*

EPSS

Процентиль: 55%

0.00332

Низкий

1.9 Low

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-p8wf-qv3j-jxc7

github

больше 3 лет назад