VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 31, 2002· Updated Apr 16, 2026

CVE-2002-1965

CVE-2002-1965

Description

Cross-site scripting (XSS) vulnerability in Errors.gsl in Imatix Xitami 2.5b4 and 2.5b5 allows remote attackers to inject arbitrary web script or HTML via the (1) Javascript events, as demonstrated via an onerror event in an IMG SRC tag or (2) User-Agent field in an HTTP GET request.

Affected products

2
  • Imatix/Xitami2 versions
    cpe:2.3:a:imatix:xitami:2.5_b4:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:imatix:xitami:2.5_b4:*:*:*:*:*:*:*
    • cpe:2.3:a:imatix:xitami:2.5_b5:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.