CVE

Id
5336  
CVE No.
CVE-2002-0948  
Status
Candidate  
Description
Scripts For Educators MakeBook 2.2 CGI program allows remote attackers to execute script as other visitors, or execute server-side includes (SSI) as the web server, via the (1) Name or (2) Email parameters, which are not properly filtered.  
Phase
Proposed (20020830)  
Votes
ACCEPT(4) Baker, Cole, Frech, Green | NOOP(3) Cox, Foat, Wall  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
28645 5336 CVE-2002-0948 BUGTRAQ:20020613 Re: SSI & CSS execution in MakeBook 2.2  View
28646 5336 CVE-2002-0948 URL:http://cert.uni-stuttgart.de/archive/bugtraq/2002/06/msg00135.html  View
28647 5336 CVE-2002-0948 BUGTRAQ:20020612 SSI & CSS execution in MakeBook 2.2  View
28648 5336 CVE-2002-0948 URL:http://archives.neohapsis.com/archives/bugtraq/2002-06/0094.html  View
28649 5336 CVE-2002-0948 CONFIRM:http://www.tesol.net/scriptmail.html  View
28650 5336 CVE-2002-0948 CONFIRM:http://www.linguistic-funland.com/scripts/MakeBook/makebook.script  View
28651 5336 CVE-2002-0948 BID:4996  View
28652 5336 CVE-2002-0948 URL:http://www.securityfocus.com/bid/4996  View
28653 5336 CVE-2002-0948 XF:makebook-name-field-validation(9356)  View

Related JVN