Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 31/12/2002 Updated: 05/09/2008

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in the fom CGI program (fom.cgi) in Faq-O-Matic 2.711 and 2.712 allows remote malicious users to inject arbitrary web script or HTML via the file parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
jon howell faq-o-matic 2.712
jon howell faq-o-matic 2.711

source: wwwsecurityfocuscom/bid/4565/info Faq-O-Matic 2711 and 2712 is a web-based Frequently Asked Question (FAQ) management system It is vulnerable to a cross site scripting issue arising from a failure to filter HTML or script from a malformed query, returning the submitted script as an error message which is then processed by the b ...

NVD-CWE-Other http://archives.neohapsis.com/archives/bugtraq/2002-04/0287.html http://www.securityfocus.com/bid/4565 http://www.iss.net/security_center/static/8906.php https://nvd.nist.gov https://www.exploit-db.com/exploits/21405/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2002-2011

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect