VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 31, 2002· Updated Jun 16, 2026

CVE-2002-2318

CVE-2002-2318

Description

Cross-site scripting (XSS) vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote attackers to inject arbitrary web script or HTML via the URI, which is inserted into 301 error messages and executed by 404 error messages.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Falcon/Falcon Web Server5 versions
    cpe:2.3:a:blueface:falcon_web_server:2.0.0.1009:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:blueface:falcon_web_server:2.0.0.1009:*:*:*:*:*:*:*
    • cpe:2.3:a:blueface:falcon_web_server:2.0.0.1020:*:*:*:*:*:*:*
    • cpe:2.3:a:blueface:falcon_web_server:2.0.0.1021:*:*:*:*:*:*:*
    • cpe:2.3:a:blueface:falcon_web_server:2.0.0.1021_ssl:*:*:*:*:*:*:*
    • (no CPE)range: 2.0.0.1009 - 2.0.0.1021

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.