Vulnerability Details CVE-2002-1070
Cross-site scripting vulnerability in PHPWiki Postnuke wiki module allows remote attackers to execute script as other PHPWiki users via the pagename parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.04
EPSS Ranking 87.9%
CVSS Severity
CVSS v2 Score 7.5
References
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0190.html
- http://www.iss.net/security_center/static/9627.php
- http://www.securityfocus.com/bid/5254
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0190.html
- http://www.iss.net/security_center/static/9627.php
- http://www.securityfocus.com/bid/5254
Products affected by CVE-2002-1070
-
cpe:2.3:a:php-wiki:php-wiki:1.2
-
cpe:2.3:a:php-wiki:php-wiki:1.2.1
-
cpe:2.3:a:php-wiki:php-wiki:1.2.2
-
cpe:2.3:a:php-wiki:php-wiki:1.3.1
-
cpe:2.3:a:php-wiki:php-wiki:1.3.2
-
cpe:2.3:a:php-wiki:php-wiki:1.3.3