medium6.8
CVE-2002-1681
Cross-site scripting (XSS) vulnerability in Slashcode CVS releases June 17 through July 1 2002 allows remote attackers to execute arbitrary script as other use…
Impact
Cross-site scripting (XSS) vulnerability in Slashcode CVS releases June 17 through July 1 2002 allows remote attackers to execute arbitrary script as other users by injecting script into the paragraph <P> tag.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Open Source Development Network | Slashcode | Versions 2.2.1, 2.2.2, 2.2.3, 2.2.4, 2.2.5 |
References
- NVD record
- CVE.org record
- http://online.securityfocus.com/archive/1/280218
- http://online.securityfocus.com/archive/1/280255
- http://www.securityfocus.com/bid/5140
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9473
- http://online.securityfocus.com/archive/1/280218
- http://online.securityfocus.com/archive/1/280255
- http://www.securityfocus.com/bid/5140
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9473