CVE-2002-1785

LowCVSS 1.9/10Last modified Jun 16, 2026

Description

Cross-site scripting (XSS) vulnerability in Zeus Administration Server in Zeus Web Server 4.0 through 4.1r2 allows remote authenticated users to inject arbitrary web script or HTML via the section parameter to index.fcgi.

Metrics

CVSS 2.0 1.9/10AV:L/AC:M/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2002-11/0104.htmlExploit, Vendor Advisory
http://online.securityfocus.com/archive/1/302961Exploit, Vendor Advisory
http://www.iss.net/security_center/static/10567.php
http://www.securityfocus.com/bid/6144Exploit, Patch
http://archives.neohapsis.com/archives/bugtraq/2002-11/0104.htmlExploit, Vendor Advisory
http://online.securityfocus.com/archive/1/302961Exploit, Vendor Advisory
http://www.iss.net/security_center/static/10567.php
http://www.securityfocus.com/bid/6144Exploit, Patch

Timeline

Published: Dec 31, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-17862.1SGI IRIX 6.5 through 6.5.14 applies a umask of 022 to root core dumps, which allows local users to read the core dumps and possibly obtain s CVE-2002-17874.6Buffer overflow in uux in eoe.sw.uucp package of SGI IRIX 6.5 through 6.5.17 allows local users to execute arbitrary code via unknown attack CVE-2002-17887.5Format string vulnerability in the nn_exitmsg function in nn 6.6.0 through 6.6.3 allows remote NNTP servers to execute arbitrary code via fo CVE-2002-17897.2Format string vulnerability in newsx NNTP client before 1.4.8 allows local users to execute arbitrary code via format string specifiers that CVE-2002-17905.0The SMTP service in Microsoft Internet Information Services (IIS) 4.0 and 5.0 allows remote attackers to bypass anti-relaying rules and send CVE-2002-17912.1SGI IRIX 6.5 through 6.5.17 creates temporary desktop files with world-writable permissions, which allows local users to overwrite or corrup CVE-2002-179210.0Buffer overflow in Fake Identd 0.9 through 1.4 allows remote attackers to execute arbitrary code as root via a long request that is split in CVE-2002-17935.0HTTP Server mod_ssl module running on HP-UX 11.04 with Virtualvault OS (VVOS) 4.5 through 4.6 closes the connection when the Apache server t CVE-2002-179410.0Unknown vulnerability in pam_authz in the LDAP-UX Integration product on HP-UX 11.00 and 11.11 allows remote attackers to execute r-commands CVE-2002-17954.3Cross-site scripting (XSS) vulnerability in connect.asp in Microsoft Terminal Services Advanced Client (TSAC) ActiveX control allows remote CVE-2002-17967.8ChaiVM EZloader for HP color LaserJet 4500 and 4550 and HP LaserJet 4100 and 8150 does not properly verify JAR signatures for new services, CVE-2002-17974.6ChaiVM for HP color LaserJet 4500 and 4550 or HP LaserJet 4100 and 8150 does not properly enforce access control restrictions, which could a