Vulnerabilities > CVE-2002-0494 - Cross-Site Scripting vulnerability in Websight Directory System Websight Directory System 0.1

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
websight-directory-system

Summary

Cross-site scripting vulnerability in WebSight Directory System 0.1 allows remote attackers to execute arbitrary Javascript and gain access to the WebSight administrator via a new link submission containing the script in a website name. This vulnerability is addressed in the following product release: WebSight Directory System, WebSight Directory System, 0.1.1

Vulnerable Configurations

Part Description Count
Application
Websight_Directory_System
1