CVEvulnerability
CVE-2002-2359
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2002-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the FTP view feature in Mozilla 1.0 allows remote attackers to inject arbitrary web script or HTML via the title tag of an ftp URL.
Affected configurations
• mozilla mozilla 1.0
• mozilla mozilla 1.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0060.html archives.neohapsis.com
- http://bugzilla.mozilla.org/show_bug.cgi?id=154030 bugzilla.mozilla.org
- http://www.iss.net/security_center/static/9757.php www.iss.net
- http://www.securityfocus.com/bid/5403 Exploit, Patch
- http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0060.html archives.neohapsis.com
- http://bugzilla.mozilla.org/show_bug.cgi?id=154030 bugzilla.mozilla.org
- http://www.iss.net/security_center/static/9757.php www.iss.net
- http://www.securityfocus.com/bid/5403 Exploit, Patch