Lucene search

[email protected]NVD:CVE-2002-2330

HistoryDec 31, 2002 - 5:00 a.m.

CVE-2002-2330

2002-12-3105:00:00

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

61.0%

JSON

Cross-site scripting (XSS) vulnerability in stat.pl in StatsPlus 1.25 allows remote attackers to inject arbitrary web script or HTML via (1) HTTP_USER_AGENT or (2) HTTP_REFERER, which is written to stats.html and executed in client browsers.

Affected configurations

Nvd

Node

uninetstatsplusMatch1.25

VendorProductVersionCPE
uninetstatsplus1.25cpe:2.3:a:uninet:statsplus:1.25:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
uninet	statsplus	1.25	cpe:2.3:a:uninet:statsplus:1.25:::::::*

References

online.securityfocus.com/archive/1/284254

www.iss.net/security_center/static/9678.php

www.securityfocus.com/bid/5316

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

61.0%

JSON

Related for NVD:CVE-2002-2330

cvelist1 cve1