CVE-2002-2362

MyMarket 1.71 - Cross-Site Scripting via noticemsg Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2002-2362. PoCs published by qber66.

AI-analyzed exploit summary This is a writeup describing a cross-site scripting (XSS) vulnerability in MyMarket. The vulnerability allows an attacker to inject malicious HTML and script code via unsanitized CGI variables, which executes in the user's browser within the security context of the vulnerable site.

Description

Cross-site scripting (XSS) vulnerability in form_header.php in MyMarket 1.71 allows remote attackers to inject arbitrary web script or HTML via the noticemsg parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by qber66 · textwebappsphp
https://www.exploit-db.com/exploits/21961

This is a writeup describing a cross-site scripting (XSS) vulnerability in MyMarket. The vulnerability allows an attacker to inject malicious HTML and script code via unsanitized CGI variables, which executes in the user's browser within the security context of the vulnerable site.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: MyMarket (version not specified)
No auth needed
Prerequisites: A vulnerable instance of MyMarket · Ability to craft a malicious URL
MITRE ATT&CK
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/6035
Third Party Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/10470.php
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/296861

Scores

EPSS 0.0160
EPSS Percentile 73.3%

Details

CWE
CWE-79
Status published
Products (1)
sourceforge/mymarket 1.71
Published Dec 31, 2002
Tracked Since Feb 18, 2026