CVE-2002-0962 in GeekLog

Summary

Cross-site scripting vulnerabilities in GeekLog 1.3.5 and earlier allow remote attackers to execute arbitrary script via (1) the url variable in the Link field of a calendar event, (2) the topic parameter in index.php, or (3) the title parameter in comment.php.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Disclosure: 10/04/2002
• Moderation: VulDB entry created
• Entries: 1: VDB-18898
• CPE: ready
• CWE: CWE-80 (Confirmed)
• Exploit: Download
• CVSS: 6.3
• EPSS: 0.11270
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-0962
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-0962
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-0962/