Vulnerability Details : CVE-2002-1036
Cross-site scripting vulnerability in search.pl for Fluid Dynamics Search Engine (FDSE) before 2.0.0.0055 allows remote attackers to execute web script via the (1) Rank or (2) Match parameters.
Vulnerability category: Cross site scripting (XSS)
Products affected by CVE-2002-1036
- cpe:2.3:a:zoltan_milosevic:fluid_dynamics_search_engine:2.0.0.0051:*:*:*:*:*:*:*
- cpe:2.3:a:zoltan_milosevic:fluid_dynamics_search_engine:2.0.0.0053:*:*:*:*:*:*:*
- cpe:2.3:a:zoltan_milosevic:fluid_dynamics_search_engine:2.0.0.0054:*:*:*:*:*:*:*
- cpe:2.3:a:zoltan_milosevic:fluid_dynamics_search_engine:2.0.0.0050:*:*:*:*:*:*:*
- cpe:2.3:a:zoltan_milosevic:fluid_dynamics_search_engine:2.0.0.0052:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2002-1036
5.45%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 92 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2002-1036
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
References for CVE-2002-1036
-
http://archives.neohapsis.com/archives/bugtraq/2002-07/0096.html
-
http://www.iss.net/security_center/static/9533.php
Patch;Vendor Advisory
-
http://archives.neohapsis.com/archives/bugtraq/2002-07/0094.html
-
http://www.securityfocus.com/bid/5199
Exploit;Patch;Vendor Advisory
-
http://www.xav.com/scripts/search/changes.htm#4
Jump to