CVE-2002-1494

MEDIO 4.3CVE-2002-1494 · Published 02/04/2003 · updated 16/06/2026

In breve

CVE-2002-1494 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda html os (aestiva).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 3.5%, superiore al 89.3% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
html os aestiva	`= 2.4`	No fix yet

Description

Cross-site scripting (XSS) vulnerabilities in Aestiva HTML/OS allows remote attackers to insert arbitrary HTML or script by inserting the script after a trailing / character, which inserts the script into the resulting error message.

References

archives.neohapsis.com/archives/bugtraq/2002-09/0026.html · Exploit
iss.net/security_center/static/10029.php · Vendor Advisory
securityfocus.com/bid/5618 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free