Lucene search

MitreCVE-2002-0732

HistoryAug 12, 2002 - 4:00 a.m.

CVE-2002-0732

2002-08-1204:00:00

mitre

web.nvd.nist.gov

cve-2002-0732

cross-site scripting

myguestbook

remote attackers

arbitrary script

html injection

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

High

EPSS

0.031

Percentile

91.1%

JSON

Cross-site scripting vulnerability in MyGuestbook 1.0 allows remote attackers to execute arbitrary script or inject HTML via fields such as (1) user name or (2) comments.

Affected configurations

Nvd

Node

levcgi.commyguestbookMatch1.0

VendorProductVersionCPE
levcgi.commyguestbook1.0cpe:2.3:a:levcgi.com:myguestbook:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
levcgi.com	myguestbook	1.0	cpe:2.3:a:levcgi.com:myguestbook:1.0:::::::*

References

archives.neohapsis.com/archives/bugtraq/2002-04/0422.html

www.iss.net/security_center/static/8968.php

www.levcgi.com/programs.cgi?program=myguestbook&action=history

www.securityfocus.com/bid/4651

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

High

EPSS

0.031

Percentile

91.1%

JSON

Related for CVE-2002-0732