Lucene search
HistoryAug 12, 2002 - 4:00 a.m.
CVE-2002-0457
cve-2002-0457
cross-site scripting
bg guestbook
remote attack
javascript
7.6 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
7.4 High
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
76.4%
Cross-site scripting vulnerability in signgbook.php for BG GuestBook 1.0 allows remote attackers to execute arbitrary Javascript via encoded tags such as <, >, and & in fields such as (1) name, (2) email, (3) AIM screen name, (4) website, (5) location, or (6) message.
Affected configurations
Node
bg_guestbookbg_guestbookMatch1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| bg_guestbook:bg_guestbook | bg guestbook | eq | 1.0 |
7.6 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
7.4 High
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
76.4%
Related for CVE-2002-0457