CVE-2002-0730

Cross-site scripting vulnerability in guestbook.pl for Philip Chinery's Guestbook 1.1 allows remote attackers to execute Javascript or HTML via fields such as (1) Name, (2) EMail, or (3) Homepage.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://archives.neohapsis.com/archives/bugtraq/2002-04/0309.html	Exploit Vendor Advisory
http://www.iss.net/security_center/static/8916.php	Vendor Advisory
http://www.securityfocus.com/bid/4566	Exploit Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-04/0309.html	Exploit Vendor Advisory
http://www.iss.net/security_center/static/8916.php	Vendor Advisory
http://www.securityfocus.com/bid/4566	Exploit Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:philip_chinery:philip_chinerys_guestbook:1.1:*:*:*:*:*:*:*

History

20 Nov 2024, 23:39

Type	Values Removed	Values Added
References	~~() http://archives.neohapsis.com/archives/bugtraq/2002-04/0309.html - Exploit, Vendor Advisory~~	() http://archives.neohapsis.com/archives/bugtraq/2002-04/0309.html - Exploit, Vendor Advisory
References	~~() http://www.iss.net/security_center/static/8916.php - Vendor Advisory~~	() http://www.iss.net/security_center/static/8916.php - Vendor Advisory
References	~~() http://www.securityfocus.com/bid/4566 - Exploit, Vendor Advisory~~	() http://www.securityfocus.com/bid/4566 - Exploit, Vendor Advisory

Information

Published : 2002-08-12 04:00

Updated : 2024-11-20 23:39

NVD link : CVE-2002-0730

Mitre link : CVE-2002-0730

CVE.ORG link : CVE-2002-0730

JSON object : View

Products Affected

philip_chinery

philip_chinerys_guestbook

CWE

NVD-CWE-Other

{"id": "CVE-2002-0730", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2002-08-12T04:00:00.000", "references": [{"url": "http://archives.neohapsis.com/archives/bugtraq/2002-04/0309.html", "tags": ["Exploit", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.iss.net/security_center/static/8916.php", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/4566", "tags": ["Exploit", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://archives.neohapsis.com/archives/bugtraq/2002-04/0309.html", "tags": ["Exploit", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.iss.net/security_center/static/8916.php", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/4566", "tags": ["Exploit", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting vulnerability in guestbook.pl for Philip Chinery's Guestbook 1.1 allows remote attackers to execute Javascript or HTML via fields such as (1) Name, (2) EMail, or (3) Homepage."}, {"lang": "es", "value": "Vulnerabilidad de secuencia de comandos en sitios cruzados en guestbook.pl para el Philip Chinery's Guestbook 1.1 permite que atacantes remotos ejecuten Javascript o HTML por medio de campos como el nombre, la direcci\u00f3n de e-mail o la p\u00e1gina de inicio."}], "lastModified": "2024-11-20T23:39:44.383", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:philip_chinery:philip_chinerys_guestbook:1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0CE974DE-7559-4E05-B9CF-85BBF79B2F6E"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}