Vulnerability Details CVE-2002-2246
Cross-site scripting (XSS) vulnerability in VisNetic Website before 3.5.15 allows remote attackers to inject arbitrary web script or HTML via the HTTP referer header (HTTP_REFERER) to a non-existent page, which is injected into the resulting 404 error page.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.018
EPSS Ranking 82.0%
CVSS Severity
CVSS v2 Score 4.3
References
- http://archives.neohapsis.com/archives/bugtraq/2002-12/0113.html
- http://www.deerfield.com/products/visnetic_website/
- http://www.securityfocus.com/bid/6369
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10852
- http://archives.neohapsis.com/archives/bugtraq/2002-12/0113.html
- http://www.deerfield.com/products/visnetic_website/
- http://www.securityfocus.com/bid/6369
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10852
Products affected by CVE-2002-2246
-
cpe:2.3:a:deerfield:visnetic_website:*