National Vulnerability Database (CVE-2002-2151)

National Cyber-Alert System Vulnerability Summary: CVE-2002-2151
Orirignal release date: 2002-12-31 Source: US-CERT/NIST ### Overview Cross-site scripting (XSS) vulnerability in Verity Search97 allows remote attackers to insert arbitrary web content and steal sensitive information from other clients, possibly due to certain error messages from template pages that use the (1) vformat or (2) vfilter functions. ### Impact CVSS Severity: 4.7 (Medium) Range: remote Authentication: input Impact Type: conf,int ### Reference to Advisories, Solutions, and Tools External Source: CERT-VN Name: VU#636431 Hyperlink: http://www.kb.cert.org/vuls/id/636431 External Source: BID Name: 5102 Hyperlink: http://www.securityfocus.com/bid/5102 External Source: XF Name: verity-search97-xss(9441) Hyperlink: http://www.iss.net/security_center/static/9441.php ### Vulnerable Software and Vendor Search97 (Verity) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2151