CVE-2002-0933

HIGH 7.5CVE-2002-0933 · Published 04/10/2002 · updated 16/06/2026

In short

CVE-2002-0933 is a HIGH (CVSS 7.5) vulnerability affecting bookit consumer (datalex).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 75.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
bookit consumer datalex	`≤ 2.1`	No fix yet

Description

Datalex PLC BookIt! Consumer before 2.2 stores usernames and passwords in plaintext in a cookie, which could allow remote attackers to gain privileges via Cross-site scripting or sniffing attacks.

References

archives.neohapsis.com/archives/bugtraq/2002-06/0063.html
iss.net/security_center/static/9316.php · Patch
securityfocus.com/bid/4972 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free