Search for vulnerabilities
Vulnerability ID | VCID-2x6x-awvc-aaab |
Aliases |
CVE-2002-0840
|
Summary | Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host: header, a different vulnerability than CAN-2002-1157. |
Status | Published |
Exploitability | 2.0 |
Weighted Severity | 6.1 |
Risk | 10.0 |
Affected and Fixed Packages | Package Details |
There are no known CWE. |
Data source | Exploit-DB |
---|---|
Date added | Oct. 2, 2002 |
Description | Apache 1.3/2.0.x - Server Side Include Cross-Site Scripting |
Ransomware campaign use | Known |
Source publication date | Oct. 2, 2002 |
Exploit type | remote |
Platform | multiple |
Source update date | Oct. 10, 2012 |
Source URL | https://www.securityfocus.com/bid/5847/info |
Exploitability (E) | Access Vector (AV) | Access Complexity (AC) | Authentication (Au) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
---|---|---|---|---|---|---|
high functional unproven proof_of_concept not_defined |
local adjacent_network network |
high medium low |
multiple single none |
none partial complete |
none partial complete |
none partial complete |
Percentile | 0.99543 |
EPSS Score | 0.90592 |
Published At | March 29, 2025, 12:55 p.m. |
Date | Actor | Action | Source | VulnerableCode Version |
---|---|---|---|---|
There are no relevant records. |