Unrated severityNVD Advisory· Published Oct 4, 2002· Updated Jun 16, 2026
CVE-2002-0931
CVE-2002-0931
Description
Cross-site scripting vulnerabilities in MyHelpDesk 20020509, and possibly other versions, allows remote attackers to execute script as other users via a (1) Title or (2) Description when a new ticket is created by a support assistant, via the "id" parameter to the index.php script with the (3) tickettime, (4) ticketfiles, or (5) updateticketlog operations, or (6) via the update section when a ticket is edited.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:luis_bernardo:myhelpdesk:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:luis_bernardo:myhelpdesk:*:*:*:*:*:*:*:*range: <=2002-05-09
- (no CPE)range: = 20020509
Patches
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- www.securityfocus.com/bid/4967nvdExploitVendor Advisory
- www.securityfocus.com/bid/4970nvdExploitVendor Advisory
- www.iss.net/security_center/static/9319.phpnvdVendor Advisory
- www.iss.net/security_center/static/9320.phpnvdVendor Advisory
- archives.neohapsis.com/archives/bugtraq/2002-06/0057.htmlnvd
News mentions
0No linked articles in our index yet.