CVEvulnerability
CVE-2002-0787
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-08-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Cross-site scripting vulnerabilities in iCon administrative web server for Critical Path inJoin Directory Server 4.0 allow remote attackers to execute script as the administrator via administrator URLs with modified (1) LOCID or (2) OC parameters.
Affected configurations
• critical path injoin directory server 4.0
References
- http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0068.html Patch, Vendor Advisory
- http://www.iss.net/security_center/static/9053.php Patch, Vendor Advisory
- http://www.securityfocus.com/bid/4717 Exploit, Patch, Vendor Advisory
- http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0068.html Patch, Vendor Advisory
- http://www.iss.net/security_center/static/9053.php Patch, Vendor Advisory
- http://www.securityfocus.com/bid/4717 Exploit, Patch, Vendor Advisory