Vulnerability in Working Resources Inc. Badblue

CVE-2002-1685

Cross-site scripting vulnerability (XSS) in BadBlue Enterprise Edition and Personal Edition 1.7 and 1.7.2 allows remote attackers to execute arbitrary script as other users by injecting script into ext.dll ISAPI.

EPSS: 0.073 (94.0th percentile) — read the EPSS interpretation.

Affected products

Working_resources_inc. Badblue — versions enterprise_1.7.2, personal_1.7, personal_1.7.2
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)