CVE-2002-2359 Cross-site scripting (XSS) vulnerability in the FTP view feature in Mozilla 1.0 allows remote attackers to inject arbitrary web script or HTML via the title tag of an ftp URL.
MediumCVSS 4.3
EPSS 3.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in the FTP view feature in Mozilla 1.0 allows remote attackers to inject arbitrary web script or HTML via the title tag of an ftp URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla | = 1.0 | No fix listed |
| mozilla | = 1.0-rc1 | No fix listed |
| mozilla | = 1.0-rc2 | No fix listed |
| mozilla | = 1.1-alpha | No fix listed |
References
- 20020806 Mozilla FTP View Cross-Site Scripting Vulnerability mailing-list
- bugzilla.mozilla.org
- multiple-ftp-view-xss(9757) vdb-entry
- 5403 exploit patch vdb-entry