CVE-2002-1785

Cross-site scripting (XSS) vulnerability in Zeus Administration Server in Zeus Web Server 4.0 through 4.1r2 allows remote authenticated users to inject arbitrary web script or HTML via the section parameter to index.fcgi.

Published: Dec 31, 2002
Updated: Apr 13, 2023
CVE: CVE-2002-1785
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 1.9
AV:L/AC:M/Au:N/C:N/I:P/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
zeus_technologies / zeus_web_server	4.1	4.1.x
zeus_technologies / zeus_web_server	4.1_r3	4.1_r3.x
zeus_technologies / zeus_web_server	4.1_r4	4.1_r4.x
zeus_technologies / zeus_web_server	4.0	4.0.x
zeus_technologies / zeus_web_server	4.1_r1	4.1_r1.x
zeus_technologies / zeus_web_server	4.1_r2	4.1_r2.x

http://archives.neohapsis.com/archives/bugtraq/2002-11/0104.html
http://online.securityfocus.com/archive/1/302961
http://www.iss.net/security_center/static/10567.php
http://www.securityfocus.com/bid/6144

Vulnerability Database

CVE-2002-1785

Deep Security Visibility Without the Complexity