CVE-2002-0590

Cross-site scripting (CSS) vulnerability in IcrediBB 1.1 Beta allows remote attackers to execute arbitrary script and steal cookies as other IcrediBB users via the (1) title or (2) body of posts.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2002-06-18

Last modified

2024-08-08

Affected products

• Icredibb (Icredibb)

References

• http://archives.neohapsis.com/archives/bugtraq/2002-04/0263.html
• http://www.iss.net/security_center/static/8879.php
• http://www.securityfocus.com/bid/4548