CVE-2002-1037 Cross-site scripting vulnerability in Double Choco Latte (DCL) before 20020706 allows remote attackers to inject arbitrary HTML, including script, into web pages via the (1) Ticket# Find, (2) Prioriti...
MediumCVSS 5.0
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting vulnerability in Double Choco Latte (DCL) before 20020706 allows remote attackers to inject arbitrary HTML, including script, into web pages via the (1) Ticket# Find, (2) Priorities, (3) Severities, (4) Projects, (5) WO# Find, (6) Departments and (7) Users features.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| michael dean double choco latte | = 2002-01-20 | No fix listed |
| michael dean double choco latte | = 2002-02-15 | No fix listed |
References
- 20020714 [VulnWatch] Double Choco Latte multiple vulnerabilities mailing-list
- dcl.sourceforge.net
- 20020714 Double Choco Latte multiple vulnerabilities mailing-list
- dcl-html-injection(9532) patch vdb-entry vendor-advisory
- 5182 patch vdb-entry vendor-advisory
- Debian Security Tracker CVE-2002-1037 vendor-advisory