What’s Vulnerable › Vulnerabilities
CVE-2002-1006
- Severity: medium (CVSS 6.8 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 4.4% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2002-10-04 · updated 2026-06-16
Description
Cross-site scripting (XSS) vulnerability in BBC Education Text to Speech Internet Enhancer (Betsie) 1.5.11 and earlier allows remote attackers to execute arbitrary web script via parserl.pl.
Affected products
- Bbc Education Betsie: 1.5, 1.5.1, 1.5.2, 1.5.3, 1.5.4, 1.5.5 (+6)
References
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0002.html
- http://www.bbc.co.uk/education/betsie/parser.pl.txt
- http://www.iss.net/security_center/static/9468.php
- http://www.securityfocus.com/bid/5135
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0002.html
- http://www.bbc.co.uk/education/betsie/parser.pl.txt
- http://www.iss.net/security_center/static/9468.php
- http://www.securityfocus.com/bid/5135
Get alerted when CVE-2002-1006 or the next vulnerability affects your stack