CVE

Id
5350  
CVE No.
CVE-2002-0962  
Status
Candidate  
Description
Cross-site scripting vulnerabilities in GeekLog 1.3.5 and earlier allow remote attackers to execute arbitrary script via (1) the url variable in the Link field of a calendar event, (2) the topic parameter in index.php, or (3) the title parameter in comment.php.  
Phase
Proposed (20020830)  
Votes
ACCEPT(3) Baker, Cole, Frech | NOOP(2) Foat, Wall  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
28722 5350 CVE-2002-0962 BUGTRAQ:20020610 [ARL02-A13] Multiple Security Issues in GeekLog  View
28723 5350 CVE-2002-0962 URL:http://archives.neohapsis.com/archives/bugtraq/2002-06/0058.html  View
28724 5350 CVE-2002-0962 CONFIRM:http://geeklog.sourceforge.net/article.php?story=20020610013358149  View
28725 5350 CVE-2002-0962 XF:geeklog-index-comment-xss(9310)  View
28726 5350 CVE-2002-0962 URL:http://www.iss.net/security_center/static/9310.php  View
28727 5350 CVE-2002-0962 XF:geeklog-calendar-event-xss(9309)  View
28728 5350 CVE-2002-0962 URL:http://www.iss.net/security_center/static/9309.php  View
28729 5350 CVE-2002-0962 BID:4969  View
28730 5350 CVE-2002-0962 URL:http://www.securityfocus.com/bid/4969  View
28731 5350 CVE-2002-0962 BID:4974  View

Related JVN