Vulnerability Details CVE-2002-1681
Cross-site scripting (XSS) vulnerability in Slashcode CVS releases June 17 through July 1 2002 allows remote attackers to execute arbitrary script as other users by injecting script into the paragraph <P> tag.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 74.5%
CVSS Severity
CVSS v2 Score 6.8
References
- http://online.securityfocus.com/archive/1/280218
- http://online.securityfocus.com/archive/1/280255
- http://www.securityfocus.com/bid/5140
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9473
- http://online.securityfocus.com/archive/1/280218
- http://online.securityfocus.com/archive/1/280255
- http://www.securityfocus.com/bid/5140
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9473
Products affected by CVE-2002-1681
-
cpe:2.3:a:open_source_development_network:slashcode:2.2.1
-
cpe:2.3:a:open_source_development_network:slashcode:2.2.2
-
cpe:2.3:a:open_source_development_network:slashcode:2.2.3
-
cpe:2.3:a:open_source_development_network:slashcode:2.2.4
-
cpe:2.3:a:open_source_development_network:slashcode:2.2.5