CVE-2002-1685: XSS
First published: Tue Dec 31 2002(Updated: )
Cross-site scripting vulnerability (XSS) in BadBlue Enterprise Edition and Personal Edition 1.7 and 1.7.2 allows remote attackers to execute arbitrary script as other users by injecting script into ext.dll ISAPI.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Working Resources Inc. BadBlue | =personal_1.7.2 | |
| Working Resources Inc. BadBlue | =enterprise_1.7.2 | |
| Working Resources Inc. BadBlue | =personal_1.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-historical
- collector/nvd-index
- agent/weakness
- agent/references
- agent/type
- agent/event
- agent/author
- agent/severity
- agent/description
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/working resources inc.
- canonical/working resources inc. badblue
- version/working resources inc. badblue/personal_1.7.2
- version/working resources inc. badblue/enterprise_1.7.2
- version/working resources inc. badblue/personal_1.7