CVE-2002-1685: XSS

Published Dec 31, 2002

Updated

Cross-site scripting vulnerability (XSS) in BadBlue Enterprise Edition and Personal Edition 1.7 and 1.7.2 allows remote attackers to execute arbitrary script as other users by injecting script into ext.dll ISAPI.

Affected Software

3 affected components

Working Resources Inc. BadBlue=enterprise_1.7.2

Working Resources Inc. BadBlue=personal_1.7

Working Resources Inc. BadBlue=personal_1.7.2

Remediation

Patch Available

http://www.securityfocus.com/bid/5086

Event History

Dec 31, 2002

CVE Published

05:00 AM

Jun 21, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-1685?

CVE-2002-1685 is classified as a medium severity vulnerability due to its potential for cross-site scripting (XSS) attacks.

How can I fix CVE-2002-1685?

To fix CVE-2002-1685, upgrade to BadBlue Enterprise Edition or Personal Edition version 1.7.3 or later.

What types of software are affected by CVE-2002-1685?

CVE-2002-1685 affects BadBlue versions 1.7 and 1.7.2 for both Enterprise and Personal Editions.

What is cross-site scripting in the context of CVE-2002-1685?

Cross-site scripting in CVE-2002-1685 allows attackers to inject malicious scripts into web pages viewed by other users.

Who can exploit CVE-2002-1685?

Remote attackers can exploit CVE-2002-1685 to execute arbitrary scripts on behalf of other users.