Unscored severity · published May 16, 2002
CVE-2002-0230
Cross-site scripting vulnerability in fom.cgi of Faq-O-Matic 2.712 allows remote attackers to execute arbitrary Javascript on other clients via the cmd parameter, which causes the…
–
CVSS
7.7%
EPSS
No
On KEV
Description
Cross-site scripting vulnerability in fom.cgi of Faq-O-Matic 2.712 allows remote attackers to execute arbitrary Javascript on other clients via the cmd parameter, which causes the script to be inserted into an error message.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.7% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FA
Faq-o-matic · Faq-o-matic
2.712 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0230
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0230
marc.info
http://marc.info/?l=bugtraq&m=101285834018701&w=2
marc.info
http://marc.info/?l=bugtraq&m=101293973111873&w=2
sourceforge.net
http://sourceforge.net/mailarchive/forum.php?thread_id=464940&forum_id=6367
Patch
http://www.debian.org/security/2002/dsa-109
More from Faq-o-matic
–
CVE-2006-0251
Cross-site scripting (XSS) vulnerability in fom.cgi in Faq-O-Matic 2.711 allows remote attackers to inject arbitrary web script or HTML via the (1) _duration, (2) file, and (3)…