CVE-2002-0944

Cross-site scripting vulnerability in DeepMetrix LiveStats 5.03 through 6.2.1 allows remote attackers to execute arbitrary script as the LiveStats user via the (1) user-agent or (2) referrer, which are not filtered by the stats program.
Configurations

Configuration 1 (hide)

cpe:2.3:a:deepmetrix:livestats:6.2:*:*:*:*:*:*:*

History

20 Nov 2024, 23:40

Type Values Removed Values Added
References () http://archives.neohapsis.com/archives/bugtraq/2002-06/0207.html - () http://archives.neohapsis.com/archives/bugtraq/2002-06/0207.html -
References () http://www.deepmetrix.com/log_analyzer/xsp/service/release_notes/index.asp - () http://www.deepmetrix.com/log_analyzer/xsp/service/release_notes/index.asp -
References () http://www.iss.net/security_center/static/9390.php - Vendor Advisory () http://www.iss.net/security_center/static/9390.php - Vendor Advisory
References () http://www.securityfocus.com/bid/5047 - Vendor Advisory () http://www.securityfocus.com/bid/5047 - Vendor Advisory

Information

Published : 2002-10-04 04:00

Updated : 2024-11-20 23:40


NVD link : CVE-2002-0944

Mitre link : CVE-2002-0944

CVE.ORG link : CVE-2002-0944


JSON object : View

Products Affected

deepmetrix

  • livestats