CVE-2002-2073

None

CVSS

—

EPSS

12.9%

Published

Dec 31, 2002

CISA due date

—

The record

Cross-site scripting (XSS) vulnerability in the default ASP pages on Microsoft Site Server 3.0 on Windows NT 4.0 allows remote attackers to inject arbitrary web script or HTML via the (1) ctr parameter in Default.asp and (2) the query string to formslogin.asp.

Affected packages

Ecosystem	Package	Introduced	Fixed