Lucene search

K
cvelistMitreCVELIST:CVE-2002-2330
HistoryOct 03, 2022 - 4:23 p.m.

CVE-2002-2330

2022-10-0316:23:50
mitre
www.cve.org
cross-site scripting
statsplus 1.25
http_user_agent
http_referer
remote attackers
web script
html
stats.html
client browsers

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.8%

Cross-site scripting (XSS) vulnerability in stat.pl in StatsPlus 1.25 allows remote attackers to inject arbitrary web script or HTML via (1) HTTP_USER_AGENT or (2) HTTP_REFERER, which is written to stats.html and executed in client browsers.

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.8%

Related for CVELIST:CVE-2002-2330