medium4.3Public exploit code
CVE-2002-1529
Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SurfControl SuperScout Email Filter 3.5 - 'MsgError.asp' Cross-Site Scripting2002-10-08 · webapps · asp · Verified
Impact
Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to insert arbitrary script or HTML via the Reason parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Surfcontrol | Superscout Email Filter | Versions 3.5, 3.5.1, 4.0 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-10/0137.html
- http://www.iss.net/security_center/static/10319.php
- http://www.securityfocus.com/bid/5928
- http://archives.neohapsis.com/archives/bugtraq/2002-10/0137.html
- http://www.iss.net/security_center/static/10319.php
- http://www.securityfocus.com/bid/5928