NetSight
IP …
high7.5Public exploit code

CVE-2002-1036

Cross-site scripting vulnerability in search.pl for Fluid Dynamics Search Engine (FDSE) before 2.0.0.0055 allows remote attackers to execute web script via the…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Cross-site scripting vulnerability in search.pl for Fluid Dynamics Search Engine (FDSE) before 2.0.0.0055 allows remote attackers to execute web script via the (1) Rank or (2) Match parameters.

Affected products

VendorProductAffected versions
Zoltan MilosevicFluid Dynamics Search Engine
Versions 2.0.0.0050, 2.0.0.0051, 2.0.0.0052, 2.0.0.0053, 2.0.0.0054

References