Unrated severityNVD Advisory· Published Oct 4, 2002· Updated Jun 16, 2026

CVE-2002-0962

Description

Cross-site scripting vulnerabilities in GeekLog 1.3.5 and earlier allow remote attackers to execute arbitrary script via (1) the url variable in the Link field of a calendar event, (2) the topic parameter in index.php, or (3) the title parameter in comment.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Geeklog/Geeklog2 versions
cpe:2.3:a:geeklog:geeklog:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:geeklog:geeklog:*:*:*:*:*:*:*:*range: <=1.3.5
- (no CPE)range: <=1.3.5

Patches

Vulnerability mechanics

References

www.iss.net/security_center/static/9309.phpnvdPatchVendor Advisory
www.iss.net/security_center/static/9310.phpnvdPatchVendor Advisory
www.securityfocus.com/bid/4969nvdExploitPatchVendor Advisory
www.securityfocus.com/bid/4974nvdExploitPatchVendor Advisory
archives.neohapsis.com/archives/bugtraq/2002-06/0058.htmlnvd
geeklog.sourceforge.net/article.phpnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.007
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000