CVE-2002-0375 Cross-site scripting vulnerability in sgdynamo.exe for Sgdynamo allows remote attackers to execute arbitrary Javascript via a URL with the script in the HTNAME parameter.
MediumCVSS 5.0
EPSS 6.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting vulnerability in sgdynamo.exe for Sgdynamo allows remote attackers to execute arbitrary Javascript via a URL with the script in the HTNAME parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ecometry sgdynamo | = 5.32 | No fix listed |
| ecometry sgdynamo | = 6.1 | No fix listed |
| ecometry sgdynamo | = 7.0 | No fix listed |
References
- 20020510 Fix available for Sgdynamo mailing-list
- 20020417 Smalls holes on 5 products #1 mailing-list
- 3458 exploit vdb-entry
- sgdynamo-htname-parameter-xss(9830) vdb-entry