medium5.0Public exploit code
CVE-2002-0230
Cross-site scripting vulnerability in fom.cgi of Faq-O-Matic 2.712 allows remote attackers to execute arbitrary Javascript on other clients via the cmd paramet…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Faq-O-Matic 2.6/2.7 - Cross-Site Scripting2002-02-04 · remote · cgi · Verified
Impact
Cross-site scripting vulnerability in fom.cgi of Faq-O-Matic 2.712 allows remote attackers to execute arbitrary Javascript on other clients via the cmd parameter, which causes the script to be inserted into an error message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Faq-O-Matic | Faq-O-Matic | Version 2.712 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=101285834018701&w=2
- http://marc.info/?l=bugtraq&m=101293973111873&w=2
- http://sourceforge.net/mailarchive/forum.php?thread_id=464940&forum_id=6367
- http://www.debian.org/security/2002/dsa-109
- http://marc.info/?l=bugtraq&m=101285834018701&w=2
- http://marc.info/?l=bugtraq&m=101293973111873&w=2
- http://sourceforge.net/mailarchive/forum.php?thread_id=464940&forum_id=6367
- http://www.debian.org/security/2002/dsa-109