CVE-2002-1852
4.3
CVSS Score
Medium
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Link copied!
Description
Cross-site scripting (XSS) vulnerability in Monkey 0.5.0 allows remote attackers to inject arbitrary web script or HTML via (1) the URL or (2) a parameter to test2.pl.
CVSS Vector Details
Attack Vector
Network
Attack Complexity
M
Confidentiality
None
Integrity
P
Availability
None
Affected Software Configurations
- a monkey-project monkey 0.5.0 * * * * * * *
Weaknesses (CWE)
- CWE-79
References & External Links
- http://archives.neohapsis.com/archives/bugtraq/2002-09/0344.html
- http://www.iss.net/security_center/static/10226.php
- http://www.iss.net/security_center/static/10229.php
- http://www.securityfocus.com/bid/5829
- http://archives.neohapsis.com/archives/bugtraq/2002-09/0344.html
- http://www.iss.net/security_center/static/10226.php
- http://www.iss.net/security_center/static/10229.php
- http://www.securityfocus.com/bid/5829
External Resources
CVE History Timeline
Jul 26, 2005 18:49
Initial Analysis
Mar 26, 2020 14:23
CPE Deprecation Remap
May 14, 2024 01:22
CVE Modified
Nov 20, 2024 23:42
CVE Modified