CVE-2002-0346 Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL to (1) service.cgi or (2) alert.cgi.
HighCVSS 7.5
EPSS 6.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL to (1) service.cgi or (2) alert.cgi.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun cobalt raq 2 | All versions | No fix listed |
| sun cobalt raq 3i | All versions | No fix listed |
| sun cobalt raq 4 | All versions | No fix listed |
References
- 20020228 Colbalt-RAQ-v4-Bugs&Vulnerabilities mailing-list
- cobalt-raq-css(8321) patch vdb-entry vendor-advisory
- 4211 patch vdb-entry vendor-advisory