CVE-2002-1685 Cross-site scripting vulnerability (XSS) in BadBlue Enterprise Edition and Personal Edition 1.7 and 1.7.2 allows remote attackers to execute arbitrary script as other users by injecting script into ex...
MediumCVSS 4.3
EPSS 7.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting vulnerability (XSS) in BadBlue Enterprise Edition and Personal Edition 1.7 and 1.7.2 allows remote attackers to execute arbitrary script as other users by injecting script into ext.dll ISAPI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| working resources inc badblue | = enterprise_1.7.2 | No fix listed |
| working resources inc badblue | = personal_1.7 | No fix listed |
| working resources inc badblue | = personal_1.7.2 | No fix listed |
References
- 20020708 Technical Details of BadBlue EXT.DLL Vulnerability mailing-list
- 5086 exploit patch vdb-entry
- badblue-extdll-xss(9513) vdb-entry