CVE-2002-2376

Leung E-guest - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in E-Guest_sign.pl in E-Guest 1.1 allows remote attackers to inject arbitrary SSI directives, web script, and HTML via the (1) full name, (2) email, (3) homepage, and (4) location parameters. NOTE: this issue might overlap CVE-2005-1605.

Exploits (1)

exploitdb WORKING POC VERIFIED
by DownBload · textremotelinux
https://www.exploit-db.com/exploits/21586

Scores

EPSS 0.0057
EPSS Percentile 68.4%

Classification

CWE
CWE-79
Status draft

Affected Products (1)

leung/e-guest

Timeline

Published Dec 31, 2002
Tracked Since Feb 18, 2026