CVE-2002-1529 Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to insert arbitrary script or H...
MediumCVSS 4.3
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to insert arbitrary script or HTML via the Reason parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| surfcontrol superscout email filter | = 3.5 | No fix listed |
| surfcontrol superscout email filter | = 3.5.1 | No fix listed |
| surfcontrol superscout email filter | = 4.0 | No fix listed |
References
- 20021008 Four Vulnerabilities in SurfControl's SuperScout Email Filter Administrative Server exploit mailing-list vendor-advisory
- superscout-emailfilter-error-xss(10319) patch vdb-entry vendor-advisory
- 5928 exploit patch vdb-entry vendor-advisory