Lucene search
HistoryAug 12, 2002 - 4:00 a.m.
CVE-2002-0457
7.6 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
7.1 High
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
76.4%
Cross-site scripting vulnerability in signgbook.php for BG GuestBook 1.0 allows remote attackers to execute arbitrary Javascript via encoded tags such as <, >, and & in fields such as (1) name, (2) email, (3) AIM screen name, (4) website, (5) location, or (6) message.
Affected configurations
Node
bg_guestbookbg_guestbookMatch1.0
7.6 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
7.1 High
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
76.4%
Related for NVD:CVE-2002-0457