CVE-2002-1727

Asksam Systems Asksam Web Publisher - XSS

Title source: rule

Description

Cross-site scripting vulnerability (XSS) in (1) as_web.exe and (2) as_web4.exe in askSam Web Publisher 1 and 4 allows remote attackers to execute arbitrary script as other users via a URL.

Exploits (1)

exploitdb WRITEUP VERIFIED

by frog · textwebappscgi

https://www.exploit-db.com/exploits/21435

View Code ZIP pw:eip

References (4)

[Vendor Advisory] http://www.ifrance.com/kitetoua/tuto/5holes4.txt

[Exploit] http://www.securityfocus.com/bid/4670

[Third Party Advisory, VDB Entry] http://online.securityfocus.com/archive/82/270970

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/9003

Scores

EPSS 0.0066

EPSS Percentile 70.7%

Classification

Status draft

Affected Products (2)

asksam_systems/asksam_web_publisher

Timeline

Published Dec 31, 2002

Tracked Since Feb 18, 2026