CVE-2002-0257

Cross-site scripting vulnerability in auction.pl of MakeBid Auction Deluxe 3.30 allows remote attackers to obtain information from other users via the form fields (1) TITLE, (2) DESCTIT, (3) DESC, (4) searchstring, (5) ALIAS, (6) EMAIL, (7) ADDRESS1, (8) ADDRESS2, (9) ADDRESS3, (10) PHONE1, (11) PHONE2, (12) PHONE3, or (13) PHONE4.

• http://marc.info/?l=bugtraq&m=101328880521775&w=2
• http://www.iss.net/security_center/static/8161.phpPatch, Vendor Advisory
• http://www.netcreations.addr.com/dcforum/DCForumID2/126.html
• http://www.securityfocus.com/bid/4069Patch, Vendor Advisory
• http://marc.info/?l=bugtraq&m=101328880521775&w=2
• http://www.iss.net/security_center/static/8161.phpPatch, Vendor Advisory
• http://www.netcreations.addr.com/dcforum/DCForumID2/126.html
• http://www.securityfocus.com/bid/4069Patch, Vendor Advisory

Published

May 29, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-0251Buffer overflow in licq 1.0.4 and earlier allows remote atta…
• CVE-2002-0252Buffer overflow in Apple QuickTime Player 5.01 and 5.02 allo…
• CVE-2002-0253PHP, when not configured with the "display_errors = Off" set…
• CVE-2002-0254ICQ 2001b Build 3659 allows remote attackers to cause a deni…
• CVE-2002-0255The default configuration of Arescom NetDSL 800 does not req…
• CVE-2002-0256The telnet port in Arescom NetDSL 1000 router allows remote …
• CVE-2002-0258Merak Mail IceWarp Web Mail uses a static identifier as a us…
• CVE-2002-0259InstantServers MiniPortal 1.1.5 and earlier stores sensitive…
• CVE-2002-0260Buffer overflow in InstantServers MiniPortal 1.1.5 and earli…
• CVE-2002-0261Directory traversal vulnerability in InstantServers MiniPort…
• CVE-2002-0262Directory traversal vulnerability in netget for Sybex E-Trai…
• CVE-2002-0263Buffer overflow in EasyBoard 2000 1.27 (aka EZboard) allows …