low2.6
CVE-2002-0292
Cross-site scripting vulnerability in Slash before 2.2.5, as used in Slashcode and elsewhere, allows remote attackers to steal cookies and authentication infor…
Impact
Cross-site scripting vulnerability in Slash before 2.2.5, as used in Slashcode and elsewhere, allows remote attackers to steal cookies and authentication information from other users via Javascript in a URL, possibly in the formkey field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Open Source Development Network | Slashcode | through 1.0.8 Versions 2.0, 2.1, 2.1.1, 2.2, 2.2.1 |