CVE-2002-1852 Cross-site scripting (XSS) vulnerability in Monkey 0.5.0 allows remote attackers to inject arbitrary web script or HTML via (1) the URL or (2) a parameter to test2.pl.
MediumCVSS 4.3
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Monkey 0.5.0 allows remote attackers to inject arbitrary web script or HTML via (1) the URL or (2) a parameter to test2.pl.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| monkey-project monkey | = 0.5.0 | No fix listed |
References
- 20020930 XSS bug in Monkey (0.5.0) HTTP server exploit mailing-list vendor-advisory
- monkey-url-test2pl-xss(10226) vdb-entry
- monkey-url-request-xss(10229) vdb-entry
- 5829 exploit vdb-entry