Lucene search
HistoryNov 16, 2005 - 9:17 p.m.
CVE-2002-2171
cve
2002
2171
cross-site scripting
xss
vulnerability
acweb
remote attackers
html
web script
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.2 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
70.5%
Cross-site scripting (XSS) vulnerability in acWEB 1.8 and 1.14 allows remote attackers to insert arbitrary HTML and web script via a URL, possibly via a “%db” request in a URL.
Affected configurations
Node
andrey_cherezovacwebMatch1.8
ORandrey_cherezovacwebMatch1.14
| CPE | Name | Operator | Version |
|---|---|---|---|
| andrey_cherezov:acweb | andrey cherezov acweb | eq | 1.8 |
| andrey_cherezov:acweb | andrey cherezov acweb | eq | 1.14 |
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.2 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
70.5%
Related for CVE-2002-2171