CVE-2002-1006
published 2002-10-04CVE-2002-1006: Cross-site scripting (XSS) vulnerability in BBC Education Text to Speech Internet Enhancer (Betsie) 1.5.11 and earlier allows remote attackers to execute…
PriorityP423medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EXPLOIT
EPSS
4.36%
90.0th percentile
Cross-site scripting (XSS) vulnerability in BBC Education Text to Speech Internet Enhancer (Betsie) 1.5.11 and earlier allows remote attackers to execute arbitrary web script via parserl.pl.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| bbc_education | betsie | — | — |
| bbc_education | betsie | — | — |
| bbc_education | betsie | — | — |
| bbc_education | betsie | — | — |
| bbc_education | betsie | — | — |
| bbc_education | betsie | — | — |
| bbc_education | betsie | — | — |
| bbc_education | betsie | — | — |
| bbc_education | betsie | — | — |
| bbc_education | betsie | — | — |
| bbc_education | betsie | — | — |
| bbc_education | betsie | — | — |
CVSS provenance
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
vendor_redhat10.0CRITICAL
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-gc6g-wh72-rqm2: Cross-site scripting (XSS) vulnerability in BBC Education Text to Speech Internet Enhancer (Betsie) 1
ghsa_unreviewed·2022-04-30
CVE-2002-1006 [MEDIUM] GHSA-gc6g-wh72-rqm2: Cross-site scripting (XSS) vulnerability in BBC Education Text to Speech Internet Enhancer (Betsie) 1
Cross-site scripting (XSS) vulnerability in BBC Education Text to Speech Internet Enhancer (Betsie) 1.5.11 and earlier allows remote attackers to execute arbitrary web script via parserl.pl.
Red Hat
security flaw
vendor_redhat·2004-11-02·CVSS 10.0
CVE-2004-1006 [CRITICAL] security flaw
security flaw
Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via certain DNS messages, a different vulnerability than CVE-2002-0702.
No detection rules found.
http://archives.neohapsis.com/archives/bugtraq/2002-07/0002.htmlhttp://www.bbc.co.uk/education/betsie/parser.pl.txthttp://www.iss.net/security_center/static/9468.phphttp://www.securityfocus.com/bid/5135http://archives.neohapsis.com/archives/bugtraq/2002-07/0002.htmlhttp://www.bbc.co.uk/education/betsie/parser.pl.txthttp://www.iss.net/security_center/static/9468.phphttp://www.securityfocus.com/bid/5135
2002-10-04
Published