Vulnerability Details CVE-2002-0281
Cross-site scripting vulnerability in DCP-Portal 4.2 and earlier allows remote attackers to gain privileges of other portal users by providing Javascript in the job information field to user_update.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 72.0%
CVSS Severity
CVSS v2 Score 5.1
References
- http://marc.info/?l=bugtraq&m=101379217032525&w=2
- http://www.dcp-portal.com/contents.php?id=18
- http://www.securityfocus.com/bid/4112
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8197
- http://marc.info/?l=bugtraq&m=101379217032525&w=2
- http://www.dcp-portal.com/contents.php?id=18
- http://www.securityfocus.com/bid/4112
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8197
Products affected by CVE-2002-0281
-
cpe:2.3:a:codeworx_technologies:dcp-portal:3.7
-
cpe:2.3:a:codeworx_technologies:dcp-portal:4.0
-
cpe:2.3:a:codeworx_technologies:dcp-portal:4.1
-
cpe:2.3:a:codeworx_technologies:dcp-portal:4.2