CVE-2002-1680

Cross-site scripting (XSS) vulnerability in CGI Online Worldweb Shopping 1.1 (a.k.a. COWS) allows remote attackers to execute arbitrary script as other users by injecting script into (1) diagnose.cgi or (2) compatible.cgi.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2002-12-31

Last modified

2024-08-08

Affected products

• Cgi Online Worldweb Shopping (Cows)

References

• http://online.securityfocus.com/archive/82/251570
• http://www.securityfocus.com/bid/3914
• http://www.securityfocus.com/bid/3921
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7986