Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 31/12/2002 Updated: 10/09/2008

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in acWEB 1.8 and 1.14 allows remote malicious users to insert arbitrary HTML and web script via a URL, possibly via a "%db" request in a URL.

Vulnerable Product	Search on Vulmon	Subscribe to Product
andrey cherezov acweb 1.8
andrey cherezov acweb 1.14

source: wwwsecurityfocuscom/bid/5793/info acWEB is prone to cross-site scripting attacks It is possible to construct a malicious link to the web server which contains arbitrary script code When the link is visited, the script code will be executed in the web client of the user visiting the link The code will be executed in the context ...

NVD-CWE-Other http://www.securityfocus.com/bid/5793 http://www.iss.net/security_center/static/10191.php http://archives.neohapsis.com/archives/bugtraq/2002-09/0304.html https://nvd.nist.gov https://www.exploit-db.com/exploits/21858/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2002-2171

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect