Unscored CVE-2002-0281 EUVD-2002-0278GHSA-88c8-p9h9-4277

Cross-site scripting vulnerability in DCP-Portal 4.2 and earlier allows remote attackers to gain privileges of other portal users by provid…

Published May 3, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site scripting vulnerability in DCP-Portal 4.2 and earlier allows remote attackers to gain privileges of other portal users by providing Javascript in the job information field to user_update.php.

References

4112 vdb-entry
http://www.dcp-portal.com/contents.php?id=18
20020215 [ARL02-A03] DCP-Portal Cross Site Scripting Vulnerability mailing-list
dcpportal-userupdate-css(8197) vdb-entry