CVE-2002-2062

Опубликовано: 31 дек. 2002

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in ftp.htt in Internet Explorer 5.5 and 6.0, when running on Windows 2000 with "Enable folder view for FTP sites" and "Enable Web content in folders" selected, allows remote attackers to inject arbitrary web script or HTML via the hostname portion of an FTP URL.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2002-06/0037.html
Exploit
Vendor Advisory
http://www.geocities.co.jp/SiliconValley/1667/advisory02e.html
Exploit
Vendor Advisory
http://www.iss.net/security_center/static/9290.php
http://www.securityfocus.com/bid/4954
Exploit
http://archives.neohapsis.com/archives/bugtraq/2002-06/0037.html
Exploit
Vendor Advisory
http://www.geocities.co.jp/SiliconValley/1667/advisory02e.html
Exploit
Vendor Advisory
http://www.iss.net/security_center/static/9290.php
http://www.securityfocus.com/bid/4954
Exploit

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.07189

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-f94v-48pw-mw72

github

почти 4 года назад