CVE-2002-0787
Critical Path inJoin Directory Server 4.0 - Cross-Site Scripting via LOCID or OC Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2002-0787. PoCs published by Nomad Mobile Research Centre.
AI-analyzed exploit summary This exploit demonstrates a reflected XSS vulnerability in Critical Path InJoin Directory Server's web-based administrative interface. The vulnerability allows an attacker to inject malicious script code via URL parameters, which executes in the context of an authenticated administrative user's browser.
Description
Cross-site scripting vulnerabilities in iCon administrative web server for Critical Path inJoin Directory Server 4.0 allow remote attackers to execute script as the administrator via administrator URLs with modified (1) LOCID or (2) OC parameters.
Exploits (1)
This exploit demonstrates a reflected XSS vulnerability in Critical Path InJoin Directory Server's web-based administrative interface. The vulnerability allows an attacker to inject malicious script code via URL parameters, which executes in the context of an authenticated administrative user's browser.