high7.5
CVE-2002-0205
Cross-site scripting (CSS) vulnerability in error.asp for Plumtree Corporate Portal 3.5 through 4.5 allows remote attackers to execute arbitrary script on othe…
Impact
Cross-site scripting (CSS) vulnerability in error.asp for Plumtree Corporate Portal 3.5 through 4.5 allows remote attackers to execute arbitrary script on other clients via the "Description" parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Plumtree | Plumtree Corporate Portal | Versions 3.5, 4.0, 4.0_sp1, 4.0i, 4.0i_sp1, 4.5 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=101189911121808&w=2
- http://online.securityfocus.com/archive/82/248396
- http://www.iss.net/security_center/static/7817.php
- http://www.securityfocus.com/bid/3799
- http://marc.info/?l=bugtraq&m=101189911121808&w=2
- http://online.securityfocus.com/archive/82/248396
- http://www.iss.net/security_center/static/7817.php
- http://www.securityfocus.com/bid/3799