Vulnerability in Critical Path Injoin Directory Server

CVE-2002-0787

Cross-site scripting vulnerabilities in iCon administrative web server for Critical Path inJoin Directory Server 4.0 allow remote attackers to execute script as the administrator via administrator URLs with modified (1) LOCID or (2) OC parameters.

EPSS: 0.029 (85.4th percentile) — read the EPSS interpretation.

Affected products

Critical_path Injoin_directory_server — versions 4.0
N/a — versions n/a

References

cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_VULNWATCH, Patch)
cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (Patch, vdb-entry, Vendor Advisory, x_refsource_XF)