Lucene search
MitreCVE-2002-1681HistoryJun 21, 2005 - 4:00 a.m.
CVE-2002-1681
2005-06-2104:00:00
mitre
web.nvd.nist.gov
24
cve-2002-1681
cross-site scripting
xss
slashcode
cvs
security vulnerability
remote attackers
injection vulnerability
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
6.6
Confidence
High
EPSS
0.005
Percentile
77.0%
Cross-site scripting (XSS) vulnerability in Slashcode CVS releases June 17 through July 1 2002 allows remote attackers to execute arbitrary script as other users by injecting script into the paragraph <p> tag.
Affected configurations
Node
open_source_development_networkslashcodeMatch2.2.1
ORopen_source_development_networkslashcodeMatch2.2.2
ORopen_source_development_networkslashcodeMatch2.2.3
ORopen_source_development_networkslashcodeMatch2.2.4
ORopen_source_development_networkslashcodeMatch2.2.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| open_source_development_network | slashcode | 2.2.1 | cpe:2.3:a:open_source_development_network:slashcode:2.2.1:*:*:*:*:*:*:* |
| open_source_development_network | slashcode | 2.2.2 | cpe:2.3:a:open_source_development_network:slashcode:2.2.2:*:*:*:*:*:*:* |
| open_source_development_network | slashcode | 2.2.3 | cpe:2.3:a:open_source_development_network:slashcode:2.2.3:*:*:*:*:*:*:* |
| open_source_development_network | slashcode | 2.2.4 | cpe:2.3:a:open_source_development_network:slashcode:2.2.4:*:*:*:*:*:*:* |
| open_source_development_network | slashcode | 2.2.5 | cpe:2.3:a:open_source_development_network:slashcode:2.2.5:*:*:*:*:*:*:* |
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
6.6
Confidence
High
EPSS
0.005
Percentile
77.0%
Related for CVE-2002-1681