Lucene search

[email protected]CVE-2002-1070

HistoryOct 04, 2002 - 4:00 a.m.

CVE-2002-1070

2002-10-0404:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

phpwiki

postnuke

cross-site scripting

vulnerability

remote execution

7.2 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.027 Low

EPSS

Percentile

90.5%

JSON

Cross-site scripting vulnerability in PHPWiki Postnuke wiki module allows remote attackers to execute script as other PHPWiki users via the pagename parameter.

CPENameOperatorVersion
php-wiki:php-wikiphp-wikieq1.2
php-wiki:php-wikiphp-wikieq1.3.1
php-wiki:php-wikiphp-wikieq1.3.3
php-wiki:php-wikiphp-wikieq1.3.2
php-wiki:php-wikiphp-wikieq1.2.2
php-wiki:php-wikiphp-wikieq1.2.1

CPE	Name	Operator	Version
php-wiki:php-wiki	php-wiki	eq	1.2
php-wiki:php-wiki	php-wiki	eq	1.3.1
php-wiki:php-wiki	php-wiki	eq	1.3.3
php-wiki:php-wiki	php-wiki	eq	1.3.2
php-wiki:php-wiki	php-wiki	eq	1.2.2
php-wiki:php-wiki	php-wiki	eq	1.2.1

References

archives.neohapsis.com/archives/bugtraq/2002-07/0190.html

www.iss.net/security_center/static/9627.php

www.securityfocus.com/bid/5254

7.2 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.027 Low

EPSS

Percentile

90.5%

JSON

Related for CVE-2002-1070

cvelist1