CVEvulnerability
CVE-2002-1662
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2002-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Multiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.11 allow remote attackers to execute arbitrary script on other clients via (1) search.php and (2) the "Your name" field during account registration.
Affected configurations
• mambo mambo site server 4.0.11
References
- http://archives.neohapsis.com/archives/bugtraq/2002-12/0111.html archives.neohapsis.com
- http://www.securityfocus.com/bid/6386 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10854 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10859 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/bugtraq/2002-12/0111.html archives.neohapsis.com
- http://www.securityfocus.com/bid/6386 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10854 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10859 exchange.xforce.ibmcloud.com