NVD

Id
80143  
Name
CVE-2002-1151  
Description
The cross-site scripting protection for Konqueror in KDE 2.2.2 and 3.0 through 3.0.3 does not properly initialize the domains on sub-frames and sub-iframes, which can allow remote attackers to execute script and steal cookies from subframes that are in other domains.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2002-10-11  
Modified Date
2016-10-17  
Seq
2002-1151  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
399486 80143 CVE-2002-1151 CSSA-2002-047.0  View
399487 80143 CVE-2002-1151 CLA-2002:525  View
399488 80143 CVE-2002-1151 20020910 KDE Security Advisory: Konqueror Cross Site Scripting Vulnerability  View
399489 80143 CVE-2002-1151 DSA-167  View
399490 80143 CVE-2002-1151 ie-sameoriginpolicy-bypass(10039)  View
399491 80143 CVE-2002-1151 http://www.kde.org/info/security/advisory-20020908-2.txt  View
399492 80143 CVE-2002-1151 MDKSA-2002:064  View
399493 80143 CVE-2002-1151 RHSA-2002:220  View
399494 80143 CVE-2002-1151 RHSA-2002:221  View
399495 80143 CVE-2002-1151 5689  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63969 JVNDB-2002-000296 KDE の Konqueror における任意のスクリプトを実行される脆弱性 ------------ CVE-2002-1151 5538 CVE-2002-1151 80143 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000296.html 2002-12-04 2007-04-01 View