What’s Vulnerable › Vulnerabilities

CVE-2002-0166

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2002-04-22 · updated 2026-06-16

Description

Cross-site scripting vulnerability in analog before 5.22 allows remote attackers to execute Javascript via an HTTP request containing the script, which is entered into a web logfile and not properly filtered by analog during display.

Affected products

• Stephen Turner Analog: 3.90_beta1, 3.90_beta2, 4.1, 4.01, 4.02, 4.03 (+15)

References

• http://www.debian.org/security/2002/dsa-125
• http://www.iss.net/security_center/static/8656.php
• http://www.osvdb.org/2059
• http://www.redhat.com/support/errata/RHSA-2002-059.html
• http://www.securityfocus.com/bid/4389
• http://www.debian.org/security/2002/dsa-125
• http://www.iss.net/security_center/static/8656.php
• http://www.osvdb.org/2059
• http://www.redhat.com/support/errata/RHSA-2002-059.html
• http://www.securityfocus.com/bid/4389

Get alerted when CVE-2002-0166 or the next vulnerability affects your stack