CVE-2002-0257

HIGH 7.5CVE-2002-0257 · Published 29/05/2002 · updated 16/06/2026

In short

CVE-2002-0257 is a HIGH (CVSS 7.5) vulnerability affecting http server (apache), makebid auction deluxe (usanet creations).
Chance of exploitation in the next 30 days (EPSS): 4.0%, higher than 90.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
http server apache	`= 1.3.17= 1.3.18= 1.3.19= 1.3.20= 1.3.22`	No fix yet
makebid auction deluxe usanet_creations	`= 3.30`	No fix yet

Description

Cross-site scripting vulnerability in auction.pl of MakeBid Auction Deluxe 3.30 allows remote attackers to obtain information from other users via the form fields (1) TITLE, (2) DESCTIT, (3) DESC, (4) searchstring, (5) ALIAS, (6) EMAIL, (7) ADDRESS1, (8) ADDRESS2, (9) ADDRESS3, (10) PHONE1, (11) PHONE2, (12) PHONE3, or (13) PHONE4.

References

More vulnerabilities in http server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

http server

apache

= 1.3.17= 1.3.18= 1.3.19= 1.3.20= 1.3.22

No fix yet

makebid auction deluxe

usanet_creations

= 3.30

No fix yet

Description

More vulnerabilities in http server

See all →