CVEvulnerability
CVE-2002-2318
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2002-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote attackers to inject arbitrary web script or HTML via the URI, which is inserted into 301 error messages and executed by 404 error messages.
Affected configurations
• blueface falcon web server 2.0.0.1009
• blueface falcon web server 2.0.0.1020
• blueface falcon web server 2.0.0.1021
• blueface falcon web server 2.0.0.1021 ssl
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2002-August/000934.html lists.grok.org.uk
- http://seclists.org/lists/bugtraq/2002/Aug/0158.html Exploit
- http://www.iss.net/security_center/static/9812.php www.iss.net
- http://www.securityfocus.com/bid/5435 Exploit
- http://lists.grok.org.uk/pipermail/full-disclosure/2002-August/000934.html lists.grok.org.uk
- http://seclists.org/lists/bugtraq/2002/Aug/0158.html Exploit
- http://www.iss.net/security_center/static/9812.php www.iss.net
- http://www.securityfocus.com/bid/5435 Exploit