Vulnerability Details CVE-2002-1445
Cross-site scripting (XSS) vulnerability in CERN Proxy Server allows remote attackers to execute script as other users via a link to a non-existent page whose name contains the script, which is inserted into the resulting error page.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 65.6%
CVSS Severity
CVSS v2 Score 4.3
References
- http://archives.neohapsis.com/archives/bugtraq/2002-08/0097.html
- http://www.iss.net/security_center/static/9834.php
- http://www.securityfocus.com/bid/5447
- http://archives.neohapsis.com/archives/bugtraq/2002-08/0097.html
- http://www.iss.net/security_center/static/9834.php
- http://www.securityfocus.com/bid/5447
Products affected by CVE-2002-1445
-
cpe:2.3:a:w3c:cern_httpd:3.0