CVE-2002-1965

Published: Dec 31, 2002Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Errors.gsl in Imatix Xitami 2.5b4 and 2.5b5 allows remote attackers to inject arbitrary web script or HTML via the (1) Javascript events, as demonstrated via an onerror event in an IMG SRC tag or (2) User-Agent field in an HTTP GET request.

Affected (2)

Products: Imatix: Xitami

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Imatix Xitami	Version 2.5_b4
Imatix Xitami	Version 2.5_b5

References (6)

http://online.securityfocus.com/archive/1/277058

Source: cve@mitre.org

http://online.securityfocus.com/archive/1/279269

Source: cve@mitre.org

http://www.securityfocus.com/bid/5025

Source: cve@mitre.org

Exploit

http://online.securityfocus.com/archive/1/277058

Source: af854a3a-2127-422b-91ae-364da2661108

http://online.securityfocus.com/archive/1/279269

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/5025

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.