CVE-2002-1732

MEDIUM 4.3CVE-2002-1732 · Published 31/12/2002 · updated 16/06/2026

In short

CVE-2002-1732 is a MEDIUM (CVSS 4.3) vulnerability affecting actinic catalog (actinic).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 72.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
actinic catalog actinic	`= 4.7`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in Actinic Catalog 4.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the query string argument to certain .pl files, (2) the REFPAGE parameter to ca000007.pl, (3) PRODREF parameter to ss000007.pl, or (4) hop parameter to ca000001.pl.

References

securitytracker.com/id
attrition.org/pipermail/vim/2006-July/000929.html
osvdb.org/27095
osvdb.org/27096
osvdb.org/27097
osvdb.org/27098
securityfocus.com/bid/4042
exchange.xforce.ibmcloud.com/vulnerabilities/8180

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free