CVE-2002-1683 in Badblue

Riassunto

di MITRE

Cross-site scripting (XSS) vulnerability in BadBlue Personal Edition 1.7.3 allows remote attackers to execute arbitrary script as other users by injecting script into the cleanSearchString() function.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Prenotare: 21/06/2005
• Divulgazione: 31/12/2002
• Moderazione: accettato
• Voce: VDB-19328
• CPE: pronto
• CWE: CWE-80 (confermato)
• Sfruttamento: Scaricare
• CVSS: 4.3 (NVD)
• EPSS: 0.01733
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-1683
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-1683
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-1683/