deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2002-2308
Published: 2002-12-31
Description: Netscape Communicator 6.2.1 allows remote attackers to cause a denial of service in client browsers via a webpage containing a recursive META refresh tag where the content tag is blank and the URL tag references itself.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000600.html; http://www.iss.net/security_center/static/9645.php; http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000600.html
CVE: CVE-2002-2309
Published: 2002-12-31
Description: php.exe in PHP 3.0 through 4.2.2, when running on Apache, does not terminate properly, which allows remote attackers to cause a denial of service via a direct request without arguments.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000605.html; http://online.securityfocus.com/archive/1/283586; http://www.iss.net/security_center/static/9646.php
CVE: CVE-2002-2310
Published: 2002-12-31
Description: ClickCartPro 4.0 stores the admin_user.db data file under the web document root with insufficient access control on servers other than Apache, which allows remote attackers to obtain usernames and passwords.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-255
References: http://securitytracker.com/id?1004825; http://www.iss.net/security_center/static/9648.php; http://www.securiteam.com/securitynews/5DP0T0K7PY.html
CVE: CVE-2002-2311
Published: 2002-12-31
Description: Microsoft Internet Explorer 6.0 and possibly others allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaScript (1) event.ctrlKey or (2) event.shiftKey onkeydown event contained in a webpage.  NOTE: it was reported that the vendor has disputed the severity of this issue.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://online.securityfocus.com/archive/1/283866; http://online.securityfocus.com/archive/1/284068; http://www.iss.net/security_center/static/9653.php
CVE: CVE-2002-2312
Published: 2002-12-31
Description: Opera 6.0.1 allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaScript (1) event.ctrlKey or (2) event.shiftKey onkeydown event contained in a webpage.
CVSS Score: 5.8 (MEDIUM)
References: http://online.securityfocus.com/archive/1/283866; http://online.securityfocus.com/archive/1/284096; http://www.securityfocus.com/bid/5290
CVE: CVE-2002-2313
Published: 2002-12-31
Description: Eudora email client 5.1.1, with "use Microsoft viewer" enabled, allows remote attackers to execute arbitrary programs via an HTML email message containing a META refresh tag that references an embedded .mhtml file with ActiveX controls that execute a second embedded program, which is processed by Internet Explorer.
CVSS Score: 8.8 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000644.html; http://www.iss.net/security_center/static/9654.php; http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000644.html
CVE: CVE-2002-2314
Published: 2002-12-31
Description: Mozilla 1.0 allows remote attackers to steal cookies from other domains via a javascript: URL with a leading "//" and ending in a newline, which causes the host/path check to fail.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://bugzilla.mozilla.org/show_bug.cgi?id=152725; http://cert.uni-stuttgart.de/archive/bugtraq/2002/09/msg00230.html; http://seclists.org/bugtraq/2002/Jul/0260.html
CVE: CVE-2002-2315
Published: 2002-12-31
Description: Cisco IOS 11.2.x and 12.0.x does not limit the size of its redirect table, which allows remote attackers to cause a denial of service (memory consumption) via spoofed ICMP redirect packets to the router.
CVSS Score: 7.8 (HIGH)
References: http://online.securityfocus.com/archive/1/273421; http://online.securityfocus.com/archive/1/273488; http://www.iss.net/security_center/static/9129.php
CVE: CVE-2002-2316
Published: 2002-12-31
Description: Cisco Catalyst 4000 series switches running CatOS 5.5.5, 6.3.5, and 7.1.2 do not always learn MAC addresses from a single initial packet, which causes unicast traffic to be broadcast across the switch and allows remote attackers to obtain sensitive network information by sniffing.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-05/0190.html; http://archives.neohapsis.com/archives/bugtraq/2002-06/0209.html; http://www.iss.net/security_center/static/9148.php
CVE: CVE-2002-2317
Published: 2002-12-31
Description: Memory leak in the (1) httpd, (2) nntpd, and (3) vpn driver in VelociRaptor 1.0 allows remote attackers to cause a denial of service (memory consumption) via an unknown method.
CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: http://www.iss.net/security_center/static/10317.php; http://www.securityfocus.com/bid/5909; http://www.symantec.com/techsupp/enterprise/products/sym_velociraptor/sym_velociraptor_1/files.html
CVE: CVE-2002-2318
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote attackers to inject arbitrary web script or HTML via the URI, which is inserted into 301 error messages and executed by 404 error messages.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.grok.org.uk/pipermail/full-disclosure/2002-August/000934.html; http://seclists.org/lists/bugtraq/2002/Aug/0158.html; http://www.iss.net/security_center/static/9812.php
CVE: CVE-2002-2319
Published: 2002-12-31
Description: Static code injection vulnerability in users.php in MySimpleNews allows remote attackers to inject arbitrary PHP code and HTML via the (1) LOGIN, (2) DATA, and (3) MESS parameters, which are inserted into news.php3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0027.html; http://www.iss.net/security_center/static/10296.php; http://www.securityfocus.com/bid/5865
CVE: CVE-2002-2320
Published: 2002-12-31
Description: MySimpleNews 1.0 allows remote attackers to delete arbitrary email messages via a direct request to vider.php3.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0027.html; http://www.iss.net/security_center/static/10299.php; http://archives.neohapsis.com/archives/bugtraq/2002-10/0027.html
CVE: CVE-2002-2321
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in (1) showcat.php and (2) addyoursite.php in phpLinkat 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the catid parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0065.html; http://www.iss.net/security_center/static/10269.php; http://www.securityfocus.com/bid/5890
CVE: CVE-2002-2322
Published: 2002-12-31
Description: Ultimate PHP Board (UPB) 1.0b stores the users.dat data file under the web root with insufficient access control, which allows remote attackers to obtain usernames and passwords.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0016.html; http://www.iss.net/security_center/static/10300.php; http://www.securityfocus.com/bid/5858
CVE: CVE-2002-2323
Published: 2002-12-31
Description: Sun PC NetLink 1.0 through 1.2 does not properly set the access control list (ACL) for files and directories that use symbolic links and have been restored from backup, which could allow local or remote attackers to bypass intended access restrictions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-59, CWE-281
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-27807-1; http://www.iss.net/security_center/static/9665.php; http://www.securityfocus.com/bid/5281
CVE: CVE-2002-2324
Published: 2002-12-31
Description: The "System Restore" directory and subdirectories, and possibly other subdirectories in the "System Volume Information" directory on Windows XP Professional, have insecure access control list (ACL) permissions, which allows local users to access restricted files and modify registry settings.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0070.html; http://www.iss.net/security_center/static/10279.php; http://www.securityfocus.com/bid/5894
CVE: CVE-2002-2325
Published: 2002-12-31
Description: The c-client library in Internet Message Access Protocol (IMAP) dated before 2002 RC2, as used by Pine 4.20 through 4.44, allows remote attackers to cause a denial of service (client crash) via a MIME-encoded email with Content-Type header containing an empty boundary field.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://online.securityfocus.com/archive/1/284086; http://www.iss.net/security_center/static/9668.php; http://www.securityfocus.com/bid/5301
CVE: CVE-2002-2326
Published: 2002-12-31
Description: The default configuration of Mail.app in Mac OS X 10.0 through 10.0.4 and 10.1 through 10.1.5 sends iDisk authentication credentials in cleartext when connecting to Mac.com, which could allow remote attackers to obtain passwords by sniffing network traffic.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0276.html; http://archives.neohapsis.com/archives/bugtraq/2002-07/0281.html; http://www.iss.net/security_center/static/9670.php
CVE: CVE-2002-2327
Published: 2002-12-31
Description: Unspecified vulnerability in the environmental monitoring subsystem in Solaris 8 running on Sun Fire 280R, V480 and V880 allows local users to cause a denial of service by setting volatile properties.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-264
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-43908-1; http://www.iss.net/security_center/static/9675.php; http://www.securityfocus.com/bid/5288
CVE: CVE-2002-2328
Published: 2002-12-31
Description: Active Directory in Windows 2000, when supporting Kerberos V authentication and GSSAPI, allows remote attackers to cause a denial of service (hang) via an LDAP client that sets the page length to zero during a large request.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20
References: http://online.securityfocus.com/archive/1/273771; http://www.iss.net/security_center/static/9159.php; http://www.securityfocus.com/bid/4804
CVE: CVE-2002-2329
Published: 2002-12-31
Description: ICQ client 2001b, 2002a and 2002b allows remote attackers to cause a denial of service (CPU consumption or crash) via a message with a large number of emoticons.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://online.securityfocus.com/archive/1/284036; http://www.iss.net/security_center/static/9677.php; http://www.securityfocus.com/bid/5295
CVE: CVE-2002-2330
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in stat.pl in StatsPlus 1.25 allows remote attackers to inject arbitrary web script or HTML via (1) HTTP_USER_AGENT or (2) HTTP_REFERER, which is written to stats.html and executed in client browsers.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-79
References: http://online.securityfocus.com/archive/1/284254; http://www.iss.net/security_center/static/9678.php; http://www.securityfocus.com/bid/5316
CVE: CVE-2002-2331
Published: 2002-12-31
Description: W3Mail 1.0.2 through 1.0.5 with server side scripting (SSI) enabled in the attachments directory does not properly restrict the types of files that can be uploaded as attachments, which allows remote attackers to execute arbitrary code by sending code in MIME attachments, then requesting the attachments.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-16
References: http://online.securityfocus.com/archive/1/284232; http://www.iss.net/security_center/static/9680.php; http://www.securityfocus.com/bid/5314
CVE: CVE-2002-2332
Published: 2002-12-31
Description: Buffer overflow in Opera 6.01 allows remote attackers to cause a denial of service (crash) via an IMG tag with large width and height attributes.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-09/0167.html; http://www.iss.net/security_center/static/10126.php; http://www.securityfocus.com/bid/5717
CVE: CVE-2002-2333
Published: 2002-12-31
Description: Buffer overflow in konqueror in KDE 2.1 through 3.0 and 3.0.2 allows remote attackers to cause a denial of service (crash) via an IMG tag with large width and height attributes.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-09/0167.html; http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-09/0177.html; http://www.iss.net/security_center/static/10126.php
CVE: CVE-2002-2334
Published: 2002-12-31
Description: Joe text editor 2.8 through 2.9.7 does not remove the group and user setuid bits for backup files, which could allow local users to execute arbitrary setuid and setgid root programs when root edits scripts owned by other users.
CVSS Score: 3.6 (LOW)
CWE: CWE-264
References: http://online.securityfocus.com/archive/1/292138; http://www.iss.net/security_center/static/10125.php; http://www.securityfocus.com/bid/5732
CVE: CVE-2002-2335
Published: 2002-12-31
Description: Killer Protection 1.0 stores the vars.inc include file under the web root with insufficient access control, which allows remote attackers to obtain user names and passwords and log in using protection.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-16
References: http://online.securityfocus.com/archive/1/294208; http://www.iss.net/security_center/static/10315.php; http://www.securityfocus.com/bid/5905
CVE: CVE-2002-2336
Published: 2002-12-31
Description: Norton Personal Firewall 2002 4.0, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-16
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0156.html; http://online.securityfocus.com/archive/1/294411; http://www.iss.net/security_center/static/10314.php
CVE: CVE-2002-2337
Published: 2002-12-31
Description: Kaspersky Anti-Hacker 1.0, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/294411; http://www.securityfocus.com/archive/1/315631; http://www.securityfocus.com/bid/5917
CVE: CVE-2002-2338
Published: 2002-12-31
Description: The POP3 mail client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier, allows remote attackers to cause a denial of service (no new mail) via a mail message containing a dot (.) at a newline, which is interpreted as the end of the message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://bugzilla.mozilla.org/show_bug.cgi?id=144228; http://mozilla.org/releases/mozilla1.0.1/security-fixes-1.0.1.html; http://online.securityfocus.com/archive/1/276628
CVE: CVE-2002-2339
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in configure.asp in Script-Shed GuestBook 1.0 allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in (1) image, (2) img, (3) image=right, (4) img=right, (5) image=left, and (6) img=left tags.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2003-10/0009.html; http://online.securityfocus.com/archive/1/294299; http://www.iss.net/security_center/static/10331.php
CVE: CVE-2002-2340
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in read.php in Phorum 3.3.2a allows remote attackers to inject arbitrary web script or HTML via (1) the t parameter or (2) the body of an email response.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=vuln-dev&m=[PII_REDACTED]8844&w=2; http://www.ifrance.com/kitetoua/tuto/5holes5.txt; http://www.phorum.org/changelog.txt
CVE: CVE-2002-2341
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in content blocking in SonicWALL SOHO3 6.3.0.0 allows remote attackers to inject arbitrary web script or HTML via a blocked URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://online.securityfocus.com/archive/1/272935; http://www.iss.net/security_center/static/9103.php; http://www.securityfocus.com/bid/4755
CVE: CVE-2002-2342
Published: 2002-12-31
Description: Bannermatic 1, 2, and 3 stores the (1) ban.log, (2) ban.bak, (3) ban.dat and (4) banmat.pwd data files under the web document root with insufficient access control, which allows attackers to obtain sensitive information via a direct request for the files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://marc.info/?l=vuln-dev&m=[PII_REDACTED]8844&w=2; http://www.ifrance.com/kitetoua/tuto/5holes5.txt; http://www.securityfocus.com/bid/4738
CVE: CVE-2002-2343
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in NOCC 0.9 through 0.9.5 allows remote attackers to inject arbitrary web script or HTML via email messages.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2002-05/0107.html; http://sourceforge.net/tracker/index.php?func=detail&aid=555897&group_id=12177&atid=112177; http://www.iss.net/security_center/static/9071.php
CVE: CVE-2002-2344
Published: 2002-12-31
Description: Ensim WEBppliance 3.0 and 3.1 allows remote attackers to read mail intended for other users by defining an alias that is the target's email address.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://securitytracker.com/id?1004938; http://www.securityfocus.com/bid/5418; http://xwss.org/thread.jsp?forum=107&thread=864
CVE: CVE-2002-2345
Published: 2002-12-31
Description: Oracle 9i Application Server 9.0.2 stores the web cache administrator interface password in plaintext, which allows remote attackers to gain access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-255
References: http://otn.oracle.com/deploy/security/pdf/2002alert39rev1.pdf; http://www.iss.net/security_center/static/9841.php; http://www.securityfocus.com/bid/7395
CVE: CVE-2002-2346
Published: 2002-12-31
Description: phpBB 2.0 through 2.0.3 generates names for uploaded avatar files with the hex-encoded IP address of the client system, which allows remote attackers to obtain client IP addresses.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://online.securityfocus.com/archive/1/294560; http://www.iss.net/security_center/static/10323.php; http://www.securityfocus.com/bid/5923
CVE: CVE-2002-2347
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in Oracle Java Server Page (OJSP) demo files (1) hellouser.jsp, (2) welcomeuser.jsp and (3) usebean.jsp in Oracle 9i Application Server 9.0.2, 1.0.2.2, 1.0.2.1s and 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the text entry field.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://otn.oracle.com/deploy/security/pdf/2002alert41rev1.pdf; http://www.iss.net/security_center/static/9842.php; http://www.securityfocus.com/bid/5452
CVE: CVE-2002-2348
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in athcgi.exe in Authoria HR allows remote attackers to inject arbitrary web script or HTML via the command parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.iss.net/security_center/static/10324.php; http://www.securityfocus.com/archive/1/294624; http://www.securityfocus.com/bid/5932
CVE: CVE-2002-2349
Published: 2002-12-31
Description: phpinfo.php in phpBBmod 1.3.3 executes the phpinfo function, which allows remote attackers to obtain sensitive environment information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.iss.net/security_center/static/10335.php; http://www.securityfocus.com/archive/1/294701; http://www.securityfocus.com/bid/5942
CVE: CVE-2002-2350
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in z_user_show.php in dbtreelistproperty_method.php in Zorum 2.4 allows remote attackers to inject arbitrary web script or HTML via the class parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0152.html; http://www.iss.net/security_center/static/10337.php; http://archives.neohapsis.com/archives/bugtraq/2002-10/0152.html
CVE: CVE-2002-2351
Published: 2002-12-31
Description: Eudora 5.1 allows remote attackers to bypass security warnings and possibly execute arbitrary code via attachments with names containing a trailing "." (dot).
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-22
References: http://cert.uni-stuttgart.de/archive/bugtraq/2002/08/msg00142.html; http://www.eudora.com/download/eudora/windows/5.2/RelNotes.txt; http://www.securityfocus.com/bid/5432
CVE: CVE-2002-2352
Published: 2002-12-31
Description: The NBActiveX.ocx ActiveX control in NeoBook 4 allows remote attackers to install and execute arbitrary programs.
CVSS Score: 5.8 (MEDIUM)
References: http://online.securityfocus.com/archive/1/300073; http://securityreason.com/securityalert/3317; http://www.iss.net/security_center/static/10645.php
CVE: CVE-2002-2353
Published: 2002-12-31
Description: tftpd32 2.50 and 2.50.2 allows remote attackers to read or write arbitrary files via a full pathname in GET and PUT requests.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://tftpd32.jounin.net/; http://www.iss.net/security_center/static/10646.php; http://www.kb.cert.org/vuls/id/632633
CVE: CVE-2002-2354
Published: 2002-12-31
Description: Netgear FM114P firmware 1.3 wireless firewall allows remote attackers to cause a denial of service (crash or hang) via a large number of TCP connection requests.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.iss.net/security_center/static/10340.php; http://www.securityfocus.com/archive/1/294702; http://www.securityfocus.com/bid/5940
CVE: CVE-2002-2355
Published: 2002-12-31
Description: Netgear FM114P firmware 1.3 wireless firewall, when configured to backup configuration information, stores DDNS (DynDNS) user name and password, MAC address filtering table and possibly other information in cleartext, which could allow local users to obtain sensitive information.
CVSS Score: 7.1 (HIGH)
CWE: CWE-255
References: http://www.iss.net/security_center/static/10341.php; http://www.securityfocus.com/archive/1/294740; http://www.securityfocus.com/bid/5943
CVE: CVE-2002-2356
Published: 2002-12-31
Description: HAMweather 2.x allows remote attackers to modify administrative settings and obtain sensitive information via a direct request to hwadmin.cgi.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://securitytracker.com/id?1005270; http://www.hamweather.net/hw3/hw2securityalert.shtml; http://www.iss.net/security_center/static/10182.php
CVE: CVE-2002-2357
Published: 2002-12-31
Description: MailEnable 1.5 015 through 1.5 018 allows remote attackers to cause a denial of service (crash) via a long USER string, possibly due to a buffer overflow.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0236.html; http://www.iss.net/security_center/static/10652.php; http://www.securityfocus.com/bid/6197
CVE: CVE-2002-2358
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in the FTP view feature in Opera 6.0 and 6.01 through 6.04 allows remote attackers to inject arbitrary web script or HTML via the title tag of an FTP URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0061.html; http://online.securityfocus.com/archive/1/286151; http://www.iss.net/security_center/static/9757.php
CVE: CVE-2002-2359
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in the FTP view feature in Mozilla 1.0 allows remote attackers to inject arbitrary web script or HTML via the title tag of an ftp URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0060.html; http://bugzilla.mozilla.org/show_bug.cgi?id=154030; http://www.iss.net/security_center/static/9757.php