← back
CVE-2002-0962

CVE-2002-0962

EPSS 8.6%
Cross-site scripting vulnerabilities in GeekLog 1.3.5 and earlier allow remote attackers to execute arbitrary script via (1) the url variable in the Link field of a calendar event, (2) the topic parameter in index.php, or (3) the title parameter in comment.php.
Affected products
n/a · n/a
public PoCs found — 2
exploitdbwww.exploit-db.com/exploits/21528unverifiedexploitdbwww.exploit-db.com/exploits/21525unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://archives.neohapsis.com/archives/bugtraq/2002-06/0058.htmlhttp://geeklog.sourceforge.net/article.php?story=20020610013358149http://www.iss.net/security_center/static/9309.phphttp://www.iss.net/security_center/static/9310.phphttp://www.securityfocus.com/bid/4969http://www.securityfocus.com/bid/4974