Lucene search

MitreCVE-2002-0948

HistoryOct 04, 2002 - 4:00 a.m.

CVE-2002-0948

2002-10-0404:00:00

mitre

web.nvd.nist.gov

cve-2002-0948

scripts for educators

makebook 2.2

cgi program

remote attackers

execute script

server-side includes

ssi

web server

name parameters

email parameters

security vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.064

Percentile

93.7%

JSON

Scripts For Educators MakeBook 2.2 CGI program allows remote attackers to execute script as other visitors, or execute server-side includes (SSI) as the web server, via the (1) Name or (2) Email parameters, which are not properly filtered.

Affected configurations

Nvd

Node

scripts_for_educatorsmakebookMatch2.2

VendorProductVersionCPE
scripts_for_educatorsmakebook2.2cpe:2.3:a:scripts_for_educators:makebook:2.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
scripts_for_educators	makebook	2.2	cpe:2.3:a:scripts_for_educators:makebook:2.2:::::::*

References

archives.neohapsis.com/archives/bugtraq/2002-06/0094.html

cert.uni-stuttgart.de/archive/bugtraq/2002/06/msg00135.html

www.iss.net/security_center/static/9356.php

www.linguistic-funland.com/scripts/MakeBook/makebook.script

www.securityfocus.com/bid/4996

www.tesol.net/scriptmail.html

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.064

Percentile

93.7%

JSON

Related for CVE-2002-0948