← All advisories

Unrated severityNVD Advisory· Published Aug 12, 2002· Updated Jun 16, 2026

CVE-2002-0458

CVE-2002-0458

Description

Cross-site scripting vulnerability in News-TNK 1.2.1 and earlier allows remote attackers to execute arbitrary Javascript via the WEB parameter.

Affected products

2

Linux Sottises/News Tnk2 versions
cpe:2.3:a:linux-sottises:news-tnk:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:linux-sottises:news-tnk:*:*:*:*:*:*:*:*range: <=1.2.2
- (no CPE)range: <=1.2.1

Patches

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

www.iss.net/security_center/static/8477.phpnvdPatchVendor Advisory
archives.neohapsis.com/archives/bugtraq/2002-03/0206.htmlnvdVendor Advisory
translate.google.com/translatenvd
www.linux-sottises.net/software/news-tnk/CHANGESnvd
www.securityfocus.com/bid/14145nvd

News mentions

0

No linked articles in our index yet.