CVE-2001-1352

Published: Dec 27, 2001Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Cross-site scripting vulnerability in Namazu 2.0.9 and earlier allows remote attackers to execute arbitrary Javascript as other web users via an error message that is returned when an invalid index file is specified in the idxname parameter.

Affected (1)

Products: Namazu: Namazu

Namazu

1 product

Namazu

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Namazu Namazu	Up to 2.0.9

References (10)

http://marc.info/?l=bugtraq&m=100947261916155&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=101060476404565&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=101068116016472&w=2

Source: cve@mitre.org

http://www.osvdb.org/5691

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/7875

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=100947261916155&w=2