Lucene search

MitreCVELIST:CVE-2002-2318

HistoryOct 26, 2007 - 7:00 p.m.

CVE-2002-2318

2007-10-2619:00:00

mitre

www.cve.org

cve-2002-2318

xss

falcon web server

remote attackers

uri

arbitrary web script

html

301 error messages

404 error messages

AI Score

5.7

Confidence

High

EPSS

0.003

Percentile

65.6%

JSON

Cross-site scripting (XSS) vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote attackers to inject arbitrary web script or HTML via the URI, which is inserted into 301 error messages and executed by 404 error messages.

References

lists.grok.org.uk/pipermail/full-disclosure/2002-August/000934.html

seclists.org/lists/bugtraq/2002/Aug/0158.html

www.iss.net/security_center/static/9812.php

www.securityfocus.com/bid/5435