National Vulnerability Database (CVE-2002-2010)

National Cyber-Alert System Vulnerability Summary: CVE-2002-2010
Orirignal release date: 2002-12-31 Source: US-CERT/NIST ### Overview Cross-site scripting (XSS) vulnerability in htsearch.cgi in htdig (ht://Dig) 3.1.5, 3.1.6, and 3.2 allows remote attackers to inject arbitrary web script or HTML via the words parameter. ### Impact CVSS Severity: 3.3 (Low) Range: remote Authentication: input Impact Type: int ### Reference to Advisories, Solutions, and Tools External Source: BUGTRAQ Name: 20020626 XSS in HTDIG Hyperlink: http://archives.neohapsis.com/archives/bugtraq/2002-06/0321.html External Source: BID Name: 5091 Hyperlink: http://www.securityfocus.com/bid/5091 External Source: XF Name: htdig-htsearch-xss(9433) Hyperlink: http://www.iss.net/security_center/static/9433.php ### Vulnerable Software and Vendor ht://Dig (ht://Dig Group) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2010