CVE-2002-1730

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

ASPjar Guestbook 1.00 allows remote attackers to delete arbitrary messages accessing the delete.asp administrative script with certain cookie values set to "true".

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected software

No affected versions have been published.

Timeline

Published
Dec 31, 2002
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2002

CVE-2002-17312.1The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing the object names that are type USRPRF.CVE-2002-17324.3Multiple cross-site scripting (XSS) vulnerabilities in Actinic Catalog 4.7.0 allow remote attackers to inject arbitrary web script or HTML vCVE-2002-17334.3Cross-site scripting (XSS) vulnerability in the web-based message board in Prospero Technologies allows remote attackers to inject arbitraryCVE-2002-173410.0NewsPro 1.01 allows remote attackers to gain unauthorized administrator access by setting their authentication cookie to "logged,true".CVE-2002-17357.2Buffer overflow in dlogin 1.0a could allow local users to gain privileges via unknown attack vectors.CVE-2002-17365.0Unknown vulnerability in CGINews before 1.06 allow remote attackers to read arbitrary files via "unfiltered user input."CVE-2002-17372.1Astaro Security Linux 2.016 creates world-writable files and directories, which allows local users to overwrite arbitrary files.CVE-2002-17385.0Alt-N Technologies MDaemon 5.0.5.0 and earlier creates a default MDaemon mail account with a password of MServer, which could allow remote aCVE-2002-17395.5Alt-N Technologies Mdaemon 5.0 through 5.0.6 uses a weak encryption algorithm to store user passwords, which allows local users to crack pasCVE-2002-17402.1Buffer overflow in WorldClient.cgi in WorldClient in Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to execute arbitrary CVE-2002-17417.2Directory traversal vulnerability in WorldClient.cgi in WorldClient for Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users toCVE-2002-17425.0SOAP::Lite 0.50 through 0.52 allows remote attackers to load arbitrary Perl functions by suppling a non-existent function in a script using
CVE-2002-1730: Medium severity, CVSS 5.0 | Vulnix