Vulnerability CVE-2002-1785
Published: 2002-12-31   Modified: 2012-02-12

Description:
Cross-site scripting (XSS) vulnerability in Zeus Administration Server in Zeus Web Server 4.0 through 4.1r2 allows remote authenticated users to inject arbitrary web script or HTML via the section parameter to index.fcgi.

CVSS2 => (AV:L/AC:M/Au:N/C:N/I:P/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
1.9/10
2.9/10
3.4/10
Exploit range
Attack complexity
Authentication
Local
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
None
Partial
None
Affected software
Zeus technologies -> Zeus web server 

 References:
http://www.securityfocus.com/bid/6144
http://www.iss.net/security_center/static/10567.php
http://online.securityfocus.com/archive/1/302961
http://archives.neohapsis.com/archives/bugtraq/2002-11/0104.html
Copyright 2024, cxsecurity.com

 

Back to Top