Vulnerability in Stephen Turner Analog
CVE-2002-0166
Cross-site scripting vulnerability in analog before 5.22 allows remote attackers to execute Javascript via an HTTP request containing the script, which is entered into a web logfile and not properly filtered by analog during display.
EPSS: 0.018 (76.2th percentile) — read the EPSS interpretation.
Affected products
- Stephen_turner Analog — versions 3.90_beta1, 3.90_beta2, 4.1
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (vendor-advisory, Patch, x_refsource_DEBIAN, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)