Cross-site scripting (XSS) vulnerability in Zeus Administration Server in Zeus Web Server 4.0 through 4.1r2 allows remote authenticated users to inject arbitrary web script or HTML via the section parameter to index.fcgi.
References
| Link | Resource |
|---|---|
| http://archives.neohapsis.com/archives/bugtraq/2002-11/0104.html | Exploit Vendor Advisory |
| http://online.securityfocus.com/archive/1/302961 | Exploit Vendor Advisory |
| http://www.iss.net/security_center/static/10567.php | |
| http://www.securityfocus.com/bid/6144 | Exploit Patch |
| http://archives.neohapsis.com/archives/bugtraq/2002-11/0104.html | Exploit Vendor Advisory |
| http://online.securityfocus.com/archive/1/302961 | Exploit Vendor Advisory |
| http://www.iss.net/security_center/static/10567.php | |
| http://www.securityfocus.com/bid/6144 | Exploit Patch |
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:42
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://archives.neohapsis.com/archives/bugtraq/2002-11/0104.html - Exploit, Vendor Advisory | |
| References | () http://online.securityfocus.com/archive/1/302961 - Exploit, Vendor Advisory | |
| References | () http://www.iss.net/security_center/static/10567.php - | |
| References | () http://www.securityfocus.com/bid/6144 - Exploit, Patch |
Information
Published : 2002-12-31 05:00
Updated : 2024-11-20 23:42
NVD link : CVE-2002-1785
Mitre link : CVE-2002-1785
CVE.ORG link : CVE-2002-1785
JSON object : View
Products Affected
zeus_technologies
- zeus_web_server
CWE