CVE-2002-0257

published 2002-05-29

CVE-2002-0257: Cross-site scripting vulnerability in auction.pl of MakeBid Auction Deluxe 3.30 allows remote attackers to obtain information from other users via the form…

high 7.5 CVSS 3.1

AV N AC L Au N C P I P A P

Cross-site scripting vulnerability in auction.pl of MakeBid Auction Deluxe 3.30 allows remote attackers to obtain information from other users via the form fields (1) TITLE, (2) DESCTIT, (3) DESC, (4) searchstring, (5) ALIAS, (6) EMAIL, (7) ADDRESS1, (8) ADDRESS2, (9) ADDRESS3, (10) PHONE1, (11) PHONE2, (12) PHONE3, or (13) PHONE4.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
apache	http_server	—	—
apache	http_server	—	—
apache	http_server	—	—
apache	http_server	—	—
apache	http_server	—	—
usanet_creations	makebid_auction_deluxe	—	—