Unrated severityNVD Advisory· Published Oct 4, 2002· Updated Apr 16, 2026

CVE-2002-0962

Description

Cross-site scripting vulnerabilities in GeekLog 1.3.5 and earlier allow remote attackers to execute arbitrary script via (1) the url variable in the Link field of a calendar event, (2) the topic parameter in index.php, or (3) the title parameter in comment.php.

Affected products

Geeklog/Geeklog
cpe:2.3:a:geeklog:geeklog:*:*:*:*:*:*:*:*
Range: <=1.3.5

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.iss.net/security_center/static/9309.phpnvdPatchVendor Advisory
www.iss.net/security_center/static/9310.phpnvdPatchVendor Advisory
www.securityfocus.com/bid/4969nvdExploitPatchVendor Advisory
www.securityfocus.com/bid/4974nvdExploitPatchVendor Advisory
archives.neohapsis.com/archives/bugtraq/2002-06/0058.htmlnvd
geeklog.sourceforge.net/article.phpnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.009
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000