Cross-site scripting (XSS) vulnerability in Xoops 1.0 RC3 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag when submitting news.
References
Configurations
History
20 Nov 2024, 23:42
Type | Values Removed | Values Added |
---|---|---|
References | () http://archives.neohapsis.com/archives/bugtraq/2002-09/0286.html - Exploit | |
References | () http://www.iss.net/security_center/static/10173.php - Patch | |
References | () http://www.securityfocus.com/archive/1/293161 - | |
References | () http://www.securityfocus.com/bid/5785 - Exploit, Patch |
Information
Published : 2002-12-31 05:00
Updated : 2024-11-20 23:42
NVD link : CVE-2002-1802
Mitre link : CVE-2002-1802
CVE.ORG link : CVE-2002-1802
JSON object : View
Products Affected
xoops
- xoops
CWE