CVE-2002-1027

CVE-2002-1027 describes a cross-site scripting flaw in Macromedia Sitespring 1.2.0 (277.1). The vulnerability resides in the default HTTP 500 error script (500error.jsp); an attacker can craft a link to 500error.jsp containing script in the 1the et parameter to execute arbitrary web script in a v...