CVE-2002-1529

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to insert arbitrary script or HTML via the Reason parameter.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2002-10/0137.htmlExploit, Vendor Advisory
http://www.iss.net/security_center/static/10319.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/5928Exploit, Patch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-10/0137.htmlExploit, Vendor Advisory
http://www.iss.net/security_center/static/10319.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/5928Exploit, Patch, Vendor Advisory

Timeline

Published: Mar 31, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-15305.0The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows users to obtain usernames and plaintext passwords CVE-2002-15315.0The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (cr CVE-2002-15325.0The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (re CVE-2002-15335.8Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP CVE-2002-15345.0Macromedia Flash Player allows remote attackers to read arbitrary files via XML script in a .swf file that is hosted on a remote SMB share.CVE-2002-15355.0Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2 allows remote attackers to identify IP addresses of hosts on the i CVE-2002-15367.5Molly IRC bot 0.5 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the $host variable for nslookup.pl, CVE-2002-153710.0admin_ug_auth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly calling admin_ug_auth.php with modifed form CVE-2002-15385.0Acuma Acusend 4, and possibly earlier versions, allows remote authenticated users to read the reports of other users by inferring the full U CVE-2002-15395.0Buffer overflow in MDaemon POP server 6.0.7 and earlier allows remote authenticated users to cause a denial of service via long (1) DELE or CVE-2002-15407.2The client for Symantec Norton AntiVirus Corporate Edition 7.5.x before 7.5.1 Build 62 and 7.6.x before 7.6.1 Build 35a runs winhlp32 with r CVE-2002-15417.5BadBlue 1.7 allows remote attackers to bypass password protections for directories and files via an HTTP request containing an extra / (slas