CVE

Id
4622  
CVE No.
CVE-2002-0230  
Status
Candidate  
Description
Cross-site scripting vulnerability in fom.cgi of Faq-O-Matic 2.712 allows remote attackers to execute arbitrary Javascript on other clients via the cmd parameter, which causes the script to be inserted into an error message.  
Phase
Proposed (20020502)  
Votes
ACCEPT(2) Cole, Green | NOOP(2) Foat, Wall | RECAST(1) Christey  
Comments
Christey> XF:faqomatic-cgi-css(8066) | URL:http://www.iss.net/security_center/static/8066.php | BID:4023 | URL:http://www.securityfocus.com/bid/4023 | | A similar issue was discovered a few months afterward in the | "file" parameter, but it was already fixed by the vendor along | with the cmd parameter. Thus CD:SF-LOC suggests combining | these into a single item. | CONFIRM:http://sourceforge.net/mailarchive/forum.php?thread_id=477665&forum_id=6367 | BID:4565 | URL:http://www.securityfocus.com/bid/4565  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
23135 4622 CVE-2002-0230 BUGTRAQ:20020204 [SUPERPETZ ADVISORY #002- Faq-O-Matic Cross-Site Scripting Vulnerability]  View
23136 4622 CVE-2002-0230 URL:http://marc.info/?l=bugtraq&m=101285834018701&w=2  View
23137 4622 CVE-2002-0230 BUGTRAQ:20020205 Faq-O-Matic Cross-Site Scripting  View
23138 4622 CVE-2002-0230 URL:http://marc.info/?l=bugtraq&m=101293973111873&w=2  View
23139 4622 CVE-2002-0230 CONFIRM:http://sourceforge.net/mailarchive/forum.php?thread_id=464940&forum_id=6367  View
23140 4622 CVE-2002-0230 DEBIAN:DSA-109  View

Related JVN