CVE-2002-1006

MediumCVSS 6.8/10Last modified Jun 16, 2026

Description

Cross-site scripting (XSS) vulnerability in BBC Education Text to Speech Internet Enhancer (Betsie) 1.5.11 and earlier allows remote attackers to execute arbitrary web script via parserl.pl.

Metrics

CVSS 2.0 6.8/10AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2002-07/0002.html
http://www.bbc.co.uk/education/betsie/parser.pl.txt
http://www.iss.net/security_center/static/9468.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/5135Exploit, Patch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-07/0002.html
http://www.bbc.co.uk/education/betsie/parser.pl.txt
http://www.iss.net/security_center/static/9468.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/5135Exploit, Patch, Vendor Advisory

Timeline

Published: Oct 4, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-10077.5Cross-site scripting vulnerabilities in Blackboard 5 allow remote attackers to execute arbitrary web script via (1) the course_id parameter CVE-2002-10087.5Cross-site scripting vulnerability in PowerBASIC urlcount.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbit CVE-2002-10097.5Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrar CVE-2002-10107.5Lotus Domino R4 allows remote attackers to bypass access restrictions for files in the web root via an HTTP request appended with a "?" char CVE-2002-10117.5Buffer overflow in web server for Tivoli Management Framework (TMF) Endpoint 3.6.x through 3.7.1, before Fixpack 2, allows remote attackers CVE-2002-10127.5Buffer overflow in web server for Tivoli Management Framework (TMF) ManagedNode 3.6.x through 3.7.1 allows remote attackers to cause a denia CVE-2002-10137.2Buffer overflow in traffic_manager for Inktomi Traffic Server 4.0.18 through 5.2.2, Traffic Edge 1.1.2 and 1.5.0, and Media-IXT 3.0.4 allows CVE-2002-10147.5Buffer overflow in RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary c CVE-2002-10157.5RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary script in the Local CVE-2002-10164.6Adobe eBook Reader allows a user to bypass restrictions for copy, print, lend, and give operations by backing up key data files, performing CVE-2002-10172.1Adobe eBook Reader 2.1 and 2.2 allows a user to copy eBooks to other systems by using the backup feature, capturing the encryption Challenge CVE-2002-10185.0The library feature for Adobe Content Server 3.0 does not verify if a customer has already checked out an eBook, which allows remote attacke