CVE-2002-0771

Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script and steal cookies via the (1) cvsroot or (2) sortby parameters.

Score

CVSS 2.0 6.4 Medium

Status

Modified - cve@mitre.org

Published

2002-08-12

Last modified

2024-08-08

Affected products

• Viewcvs (Viewcvs)

References

• http://archives.neohapsis.com/archives/bugtraq/2002-05/0161.html
• http://www.iss.net/security_center/static/9112.php
• http://www.securityfocus.com/bid/4818