Vulnerability Name: | CVE-2002-1006 (CCN-9468) | ||||||||
Assigned: | 2002-07-01 | ||||||||
Published: | 2002-07-01 | ||||||||
Updated: | 2008-09-05 | ||||||||
Summary: | Cross-site scripting (XSS) vulnerability in BBC Education Text to Speech Internet Enhancer (Betsie) 1.5.11 and earlier allows remote attackers to execute arbitrary web script via parserl.pl. | ||||||||
CVSS v3 Severity: | 5.6 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
CVSS v2 Severity: | 6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
| ||||||||
Vulnerability Type: | CWE-Other | ||||||||
Vulnerability Consequences: | Gain Access | ||||||||
References: | Source: BUGTRAQ Type: UNKNOWN 20020701 PTL-2002-03 Betsie XSS Vuln Source: CCN Type: BugTraq Mailing List, Mon Jul 01 2002 - 02:42:28 CDT PTL-2002-03 Betsie XSS Vuln Source: MITRE Type: CNA CVE-2002-1006 Source: CCN Type: BBC Web site Betsie Download Page Source: CONFIRM Type: UNKNOWN http://www.bbc.co.uk/education/betsie/parser.pl.txt Source: XF Type: Patch, Vendor Advisory betsie-parserl-xss(9468) Source: CCN Type: OSVDB ID: 5031 BBC Education Text to Speech parser.pl XSS Source: BID Type: Exploit, Patch, Vendor Advisory 5135 Source: CCN Type: BID-5135 Betsie Parserl.PL Cross-Site Scripting Vulnerability Source: XF Type: UNKNOWN betsie-parserl-xss(9468) | ||||||||
Vulnerable Configuration: | Configuration 1: Denotes that component is vulnerable | ||||||||
BACK |