CVE-2002-1662: XSS

Published Dec 31, 2002

Updated

Multiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.11 allow remote attackers to execute arbitrary script on other clients via (1) search.php and (2) the "Your name" field during account registration.

Affected Software

1 affected component

Mambo Mambo Site Server=4.0.11

Remediation

Patch Available

http://www.securityfocus.com/bid/6386

Event History

Dec 31, 2002

CVE Published

05:00 AM

May 19, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-1662?

CVE-2002-1662 is classified as a moderate severity vulnerability due to its potential for executing arbitrary scripts on client browsers.

How do I fix CVE-2002-1662?

To fix CVE-2002-1662, upgrade Mambo Site Server to a version that addresses the cross-site scripting vulnerabilities.

What components are affected by CVE-2002-1662?

CVE-2002-1662 affects the search.php file and the 'Your name' field used during user registration in Mambo Site Server 4.0.11.

Who can exploit CVE-2002-1662?

Remote attackers can exploit CVE-2002-1662 to inject malicious scripts into web pages viewed by other users.

Is CVE-2002-1662 still a threat today?

While CVE-2002-1662 originates from 2002, any unpatched instances of Mambo Site Server 4.0.11 may still be vulnerable.