CVE-2002-0257

Published: May 29, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Cross-site scripting vulnerability in auction.pl of MakeBid Auction Deluxe 3.30 allows remote attackers to obtain information from other users via the form fields (1) TITLE, (2) DESCTIT, (3) DESC, (4) searchstring, (5) ALIAS, (6) EMAIL, (7) ADDRESS1, (8) ADDRESS2, (9) ADDRESS3, (10) PHONE1, (11) PHONE2, (12) PHONE3, or (13) PHONE4.

Affected (6)

Products: Apache: Http Server · Usanet Creations: Makebid Auction Deluxe

Apache

1 product

Http Server

Usanet Creations

1 product

Makebid Auction Deluxe

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Apache Http Server	Version 1.3.17
Apache Http Server	Version 1.3.18
Apache Http Server	Version 1.3.19
Apache Http Server	Version 1.3.20
Apache Http Server	Version 1.3.22
Usanet Creations Makebid Auction Deluxe	Version 3.30