CVE-2002-2359

Mozilla - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in the FTP view feature in Mozilla 1.0 allows remote attackers to inject arbitrary web script or HTML via the title tag of an ftp URL.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Eiji James Yoshida · textremoteunix

https://www.exploit-db.com/exploits/21682

View Code ZIP pw:eip

References (4)

[Third Party Advisory] http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0060.html

[Issue Tracking] http://bugzilla.mozilla.org/show_bug.cgi?id=154030

[Exploit, Patch] http://www.securityfocus.com/bid/5403

[Third Party Advisory] http://www.iss.net/security_center/static/9757.php

Scores

EPSS 0.0023

EPSS Percentile 45.5%

Classification

CWE

CWE-79

Status draft

Affected Products (4)

mozilla/mozilla

Timeline

Published Dec 31, 2002

Tracked Since Feb 18, 2026