Back to Database
Status published
High
CVE-2002-0166
Cross-site scripting vulnerability in analog before 5.22 allows remote attackers...
Vulnerability Description
Cross-site scripting vulnerability in analog before 5.22 allows remote attackers to execute Javascript via an HTTP request containing the script, which is entered into a web logfile and not properly filtered by analog during display.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2002-0166
Credits & Attribution
No credits recorded in the NVD database.
References
More from stephen turner
View All →Affected Vendor
stephen turner
View all reports →Affected Software
analog
Vulnerable Versions:
3.90_beta1, 3.90_beta2, 4.1, 4.01, 4.02, 4.03, 4.04, 4.11, 4.14, 4.15, 4.16, 4.90_beta2, 4.90_beta3, 4.90_beta4, 4.91_beta1, 5.0, 5.01, 5.1a, 5.2, 5.02, 5.03
Timeline
Official Publish:
June 25th, 2002
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.