Vulnerabilities > CVE-2002-1037 - HTML Injection vulnerability in Michael Dean Double Choco Latte 20020120/20020215
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
PARTIAL Availability impact
NONE Summary
Cross-site scripting vulnerability in Double Choco Latte (DCL) before 20020706 allows remote attackers to inject arbitrary HTML, including script, into web pages via the (1) Ticket# Find, (2) Priorities, (3) Severities, (4) Projects, (5) WO# Find, (6) Departments and (7) Users features.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |