Lucene search
MitreCVE-2002-1662HistoryMay 19, 2005 - 4:00 a.m.
CVE-2002-1662
2005-05-1904:00:00
mitre
web.nvd.nist.gov
21
cve-2002-1662
xss
mambo site server
cross-site scripting
remote attackers
script execution
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
6.5
Confidence
High
EPSS
0.005
Percentile
75.4%
Multiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.11 allow remote attackers to execute arbitrary script on other clients via (1) search.php and (2) the “Your name” field during account registration.
Affected configurations
Node
mambomambo_site_serverMatch4.0.11
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mambo | mambo_site_server | 4.0.11 | cpe:2.3:a:mambo:mambo_site_server:4.0.11:*:*:*:*:*:*:* |
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
6.5
Confidence
High
EPSS
0.005
Percentile
75.4%
Related for CVE-2002-1662