Security Advisory

CVE-2002-0292

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2003-04-02 05:00:00

Last updated 2024-08-08 02:42:28

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Cross-site scripting vulnerability in Slash before 2.2.5, as used in Slashcode and elsewhere, allows remote attackers to steal cookies and authentication information from other users via Javascript in a URL, possibly in the formkey field.

← Browse all CVEs View on cve.org ↗