CVE-2002-1732

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-12-31 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in Actinic Catalog 4.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the query string argument to certain .pl files, (2) the REFPAGE parameter to ca000007.pl, (3) PRODREF parameter to ss000007.pl, or (4) hop parameter to ca000001.pl.

Affected products

Actinic Catalog: 4.7

References

http://securitytracker.com/id?1003502
http://www.attrition.org/pipermail/vim/2006-July/000929.html
http://www.osvdb.org/27095
http://www.osvdb.org/27096
http://www.osvdb.org/27097
http://www.osvdb.org/27098
http://www.securityfocus.com/bid/4042
https://exchange.xforce.ibmcloud.com/vulnerabilities/8180
http://securitytracker.com/id?1003502
http://www.attrition.org/pipermail/vim/2006-July/000929.html
http://www.osvdb.org/27095
http://www.osvdb.org/27096

Get alerted when CVE-2002-1732 or the next vulnerability affects your stack