Unscored CVE-2002-2377 EUVD-2002-2355GHSA-3vjv-c88x-5rh5

Cross-site scripting (XSS) vulnerability in addentry.cgi in ZAP 1.0.3 allows remote attackers to inject arbitrary SSi directives, web scrip…

Published Oct 31, 2007 · Updated Sep 16, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in addentry.cgi in ZAP 1.0.3 allows remote attackers to inject arbitrary SSi directives, web script, and HTML via the entry field.

References

20020629 SSI & CSS execution in E-Guest (1.1) & ZAP Book (v1.0.3) mailing-list
5130 vdb-entry
zapbook-entry-xss(9471) vdb-entry
5131 vdb-entry
zapbook-ssi-command-execution(9472) vdb-entry