7.5
CVE-2002-1036
- EPSS 7.18%
- Veröffentlicht 04.10.2002 04:00:00
- Zuletzt bearbeitet 16.06.2026 21:58:36
- CVE-Watchlists
- Unerledigt
LoginCross-site scripting vulnerability in search.pl for Fluid Dynamics Search Engine (FDSE) before 2.0.0.0055 allows remote attackers to execute web script via the (1) Rank or (2) Match parameters.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zoltan Milosevic ≫ Fluid Dynamics Search Engine Version2.0.0.0050
Zoltan Milosevic ≫ Fluid Dynamics Search Engine Version2.0.0.0051
Zoltan Milosevic ≫ Fluid Dynamics Search Engine Version2.0.0.0052
Zoltan Milosevic ≫ Fluid Dynamics Search Engine Version2.0.0.0053
Zoltan Milosevic ≫ Fluid Dynamics Search Engine Version2.0.0.0054
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 7.18% | 0.935 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://archives.neohapsis.com/archives/bugtraq/2002-07/0094.html
http://archives.neohapsis.com/archives/bugtraq/2002-07/0096.html
http://www.iss.net/security_center/static/9533.php
http://www.securityfocus.com/bid/5199
http://www.xav.com/scripts/search/changes.htm#4