Unscored CVE-2002-0292 EUVD-2002-0289GHSA-mc3r-fx6r-7vrr

Cross-site scripting vulnerability in Slash before 2.2.5, as used in Slashcode and elsewhere, allows remote attackers to steal cookies and …

Published Apr 2, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site scripting vulnerability in Slash before 2.2.5, as used in Slashcode and elsewhere, allows remote attackers to steal cookies and authentication information from other users via Javascript in a URL, possibly in the formkey field.

References

20020219 [SA-2002:01] Slashcode login vulnerability mailing-list
slashcode-site-xss(8221) vdb-entry
4116 vdb-entry