Cross-site scripting vulnerabilities in iCon administrative web server for Critical Path inJoin Directory Server 4.0 allow remote attackers to execute script as the administrator via administrator URLs with modified (1) LOCID or (2) OC parameters.
References
Link | Resource |
---|---|
http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0068.html | Patch Vendor Advisory |
http://www.iss.net/security_center/static/9053.php | Patch Vendor Advisory |
http://www.securityfocus.com/bid/4717 | Exploit Patch Vendor Advisory |
http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0068.html | Patch Vendor Advisory |
http://www.iss.net/security_center/static/9053.php | Patch Vendor Advisory |
http://www.securityfocus.com/bid/4717 | Exploit Patch Vendor Advisory |
Configurations
History
20 Nov 2024, 23:39
Type | Values Removed | Values Added |
---|---|---|
References | () http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0068.html - Patch, Vendor Advisory | |
References | () http://www.iss.net/security_center/static/9053.php - Patch, Vendor Advisory | |
References | () http://www.securityfocus.com/bid/4717 - Exploit, Patch, Vendor Advisory |
Information
Published : 2002-08-12 04:00
Updated : 2025-04-03 01:03
NVD link : CVE-2002-0787
Mitre link : CVE-2002-0787
CVE.ORG link : CVE-2002-0787
JSON object : View
Products Affected
critical_path
- injoin_directory_server
CWE