Vulnerability in Cows Cgi Online Worldweb Shopping

CVE-2002-1680

Cross-site scripting (XSS) vulnerability in CGI Online Worldweb Shopping 1.1 (a.k.a. COWS) allows remote attackers to execute arbitrary script as other users by injecting script into (1) diagnose.cgi or (2) compatible.cgi.

EPSS: 0.012 (64.4th percentile) — read the EPSS interpretation.

Affected products

Cows Cgi_online_worldweb_shopping — versions 1.1
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (mailing-list, x_refsource_VULN-DEV)