CVEvulnerability

CVE-2002-2350

4.3 MEDIUM Published 2002-12-31 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2002-12-31
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses: CWE-79

Description

Cross-site scripting (XSS) vulnerability in z_user_show.php in dbtreelistproperty_method.php in Zorum 2.4 allows remote attackers to inject arbitrary web script or HTML via the class parameter.

Affected configurations

• phpoutsourcing zorum 2.4

Weakness · CWE (1)

CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References

http://archives.neohapsis.com/archives/bugtraq/2002-10/0152.html Exploit
http://www.iss.net/security_center/static/10337.php www.iss.net
http://archives.neohapsis.com/archives/bugtraq/2002-10/0152.html Exploit
http://www.iss.net/security_center/static/10337.php www.iss.net

CVE-2002-2350

Description

Affected configurations

Related

Weakness · CWE (1)

References