Vulnerability Details CVE-2002-0292
Cross-site scripting vulnerability in Slash before 2.2.5, as used in Slashcode and elsewhere, allows remote attackers to steal cookies and authentication information from other users via Javascript in a URL, possibly in the formkey field.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 62.3%
CVSS Severity
CVSS v2 Score 2.6
References
Products affected by CVE-2002-0292
-
cpe:2.3:a:open_source_development_network:slashcode:*
-
cpe:2.3:a:open_source_development_network:slashcode:2.0
-
cpe:2.3:a:open_source_development_network:slashcode:2.1
-
cpe:2.3:a:open_source_development_network:slashcode:2.1.1
-
cpe:2.3:a:open_source_development_network:slashcode:2.2
-
cpe:2.3:a:open_source_development_network:slashcode:2.2.1
-
cpe:2.3:a:open_source_development_network:slashcode:2.2.2
-
cpe:2.3:a:open_source_development_network:slashcode:2.2.3
-
cpe:2.3:a:open_source_development_network:slashcode:2.2.4