Vulnerability Description
Cross-site scripting vulnerability in codeparse.php of Open Bulletin Board (OpenBB) 1.0.0 allows remote attackers to execute arbitrary script and steal cookies via Javascript in the IMG tag.
CVSS Score
7.5
HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Openbb | Openbb | 1.0.0_beta1 |
References
- http://community.iansoft.net/read.php?TID=5159
- http://marc.info/?l=bugtraq&m=101466092601554&w=2
- http://www.iss.net/security_center/static/8278.phpExploitPatchVendor Advisory
- http://www.osvdb.org/5658
- http://www.securityfocus.com/bid/4171
- http://community.iansoft.net/read.php?TID=5159
- http://marc.info/?l=bugtraq&m=101466092601554&w=2
- http://www.iss.net/security_center/static/8278.phpExploitPatchVendor Advisory
- http://www.osvdb.org/5658
- http://www.securityfocus.com/bid/4171
FAQ
What is CVE-2002-0330?
CVE-2002-0330 is a vulnerability with a CVSS score of 7.5 (HIGH). Cross-site scripting vulnerability in codeparse.php of Open Bulletin Board (OpenBB) 1.0.0 allows remote attackers to execute arbitrary script and steal cookies via Javascript in the IMG tag.
How severe is CVE-2002-0330?
CVE-2002-0330 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2002-0330?
Check the references section above for vendor advisories and patch information. Affected products include: Openbb Openbb.