medium6.8Public exploit code
CVE-2002-1727
Cross-site scripting vulnerability (XSS) in (1) as_web.exe and (2) as_web4.exe in askSam Web Publisher 1 and 4 allows remote attackers to execute arbitrary scr…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- askSam 4.0 Web Publisher - Cross-Site Scripting2002-05-05 · webapps · cgi · Verified
Impact
Cross-site scripting vulnerability (XSS) in (1) as_web.exe and (2) as_web4.exe in askSam Web Publisher 1 and 4 allows remote attackers to execute arbitrary script as other users via a URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Asksam Systems | Asksam Web Publisher | Versions 1.0, 4.0 |
References
- NVD record
- CVE.org record
- http://online.securityfocus.com/archive/82/270970
- http://www.ifrance.com/kitetoua/tuto/5holes4.txt
- http://www.securityfocus.com/bid/4670
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9003
- http://online.securityfocus.com/archive/82/270970
- http://www.ifrance.com/kitetoua/tuto/5holes4.txt
- http://www.securityfocus.com/bid/4670
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9003