PT-2002-2507 · Zeus · Zeus Web Server

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-1785

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Baixa

Vetor base

AV:L/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Zeus Web Server versions 4.0 through 4.1r2

Description A cross-site scripting (XSS) issue exists, allowing remote authenticated users to inject arbitrary web script or HTML via the section parameter to "index.fcgi" API endpoint.

Recommendations For Zeus Web Server versions 4.0 through 4.1r2, avoid using the section parameter in the "index.fcgi" API endpoint until a fix is available. Consider restricting access to the index.fcgi endpoint to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2002-1785

Produtos afetados

Zeus Web Server

Referências · 7

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-11/0104.html · Exploit
• 🔥 https://exploit-db.com/exploits/22000 · Exploit
• 🔥 http://securityfocus.com/bid/6144 · Exploit
• 🔥 http://online.securityfocus.com/archive/1/302961 · Exploit
• http://iss.net/security_center/static/10567.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1785 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1785 · Nota