VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 31, 2002· Updated Apr 16, 2026

CVE-2002-2318

CVE-2002-2318

Description

Cross-site scripting (XSS) vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote attackers to inject arbitrary web script or HTML via the URI, which is inserted into 301 error messages and executed by 404 error messages.

Affected products

4
  • Blueface/Falcon Web Server4 versions
    cpe:2.3:a:blueface:falcon_web_server:2.0.0.1009:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:blueface:falcon_web_server:2.0.0.1009:*:*:*:*:*:*:*
    • cpe:2.3:a:blueface:falcon_web_server:2.0.0.1020:*:*:*:*:*:*:*
    • cpe:2.3:a:blueface:falcon_web_server:2.0.0.1021:*:*:*:*:*:*:*
    • cpe:2.3:a:blueface:falcon_web_server:2.0.0.1021_ssl:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.