20021008 Four Vulnerabilities in SurfControl's SuperScout Email Filter Administrative Servermailing list
http://archives.neohapsis.com/archives/bugtraq/2002-10/0137.html CVE-2002-1529
SurfControl SuperScout Email Filter 3.5 - 'MsgError.asp' Cross-Site Scripting
Record summary
CVE-2002-1529 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to insert arbitrary script or HTML via the Reason parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBSurfControl SuperScout Email Filter 3.5 - 'MsgError.asp' Cross-Site ScriptingExploitDB exploitby ken@FTUNot analyzed1 file
References
4superscout-emailfilter-error-xss(10319)vdb entry
http://www.iss.net/security_center/static/10319.php 5928vdb entry
http://www.securityfocus.com/bid/5928 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2002-1529