Lucene search
MitreCVE-2002-1785HistoryJun 28, 2005 - 4:00 a.m.
CVE-2002-1785
2005-06-2804:00:00
mitre
web.nvd.nist.gov
32
cve-2002-1785
cross-site scripting
xss
zeus administration server
zeus web server
CVSS2
1.9
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.3
Confidence
High
EPSS
0.001
Percentile
50.8%
Cross-site scripting (XSS) vulnerability in Zeus Administration Server in Zeus Web Server 4.0 through 4.1r2 allows remote authenticated users to inject arbitrary web script or HTML via the section parameter to index.fcgi.
Affected configurations
Node
zeus_technologieszeus_web_serverMatch4.0
ORzeus_technologieszeus_web_serverMatch4.1
ORzeus_technologieszeus_web_serverMatch4.1_r1
ORzeus_technologieszeus_web_serverMatch4.1_r2
ORzeus_technologieszeus_web_serverMatch4.1_r3
ORzeus_technologieszeus_web_serverMatch4.1_r4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| zeus_technologies | zeus_web_server | 4.0 | cpe:2.3:a:zeus_technologies:zeus_web_server:4.0:*:*:*:*:*:*:* |
| zeus_technologies | zeus_web_server | 4.1 | cpe:2.3:a:zeus_technologies:zeus_web_server:4.1:*:*:*:*:*:*:* |
| zeus_technologies | zeus_web_server | 4.1_r1 | cpe:2.3:a:zeus_technologies:zeus_web_server:4.1_r1:*:*:*:*:*:*:* |
| zeus_technologies | zeus_web_server | 4.1_r2 | cpe:2.3:a:zeus_technologies:zeus_web_server:4.1_r2:*:*:*:*:*:*:* |
| zeus_technologies | zeus_web_server | 4.1_r3 | cpe:2.3:a:zeus_technologies:zeus_web_server:4.1_r3:*:*:*:*:*:*:* |
| zeus_technologies | zeus_web_server | 4.1_r4 | cpe:2.3:a:zeus_technologies:zeus_web_server:4.1_r4:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2002-1785
2005-06-28 04:00:00
CVE-2010-0363
2010-01-20 16:00:00
exploitdb
exploitdb
Zeus Web Server 4.0/4.1 - Admin Interface Cross-Site Scripting
2002-11-08 00:00:00
nvd
nvd
CVE-2002-1785
2002-12-31 05:00:00
CVE-2010-0363
2010-01-20 16:30:00
prion
prion
Cross site scripting
2010-01-20 16:30:00
cve
cve
CVE-2010-0363
2010-01-20 16:30:00
CVSS2
1.9
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.3
Confidence
High
EPSS
0.001
Percentile
50.8%
Related for CVE-2002-1785