PT-2002-2681 · Cybozu · Cybozu Share 360

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-1960

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cybozu Share360 version 1.1

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via an HTML link. This could potentially lead to unauthorized actions on the affected system.

Recommendations For Cybozu Share360 version 1.1, update to a version that includes a fix for this issue, as no specific workaround is provided for this version.

Fix

Related Identifiers

CVE-2002-1960

Affected Products

Cybozu Share 360

References · 4

• http://securityfocus.com/bid/5151 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2002-1960 · Security Note
• http://iss.net/security_center/static/9510.php · Patch
• http://share360.com/products/s360/Release_Notes.html · Note