CVE-2002-1683 in Badblue

Resumen

por MITRE

Cross-site scripting (XSS) vulnerability in BadBlue Personal Edition 1.7.3 allows remote attackers to execute arbitrary script as other users by injecting script into the cleanSearchString() function.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservar: 2005-06-21
• Divulgación: 2002-12-31
• Moderación: aceptado
• Artículo: VDB-19328
• CPE: listo
• CWE: CWE-80 (confirmado)
• Explotación: Descargar
• CVSS: 4.3 (NVD)
• EPSS: 0.01733
• KEV: no
• Actividades: muy bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-1683
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-1683
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-1683/