CVE-2002-0458

Cross-site scripting vulnerability in News-TNK 1.2.1 and earlier allows remote attackers to execute arbitrary Javascript via the WEB parameter.

• http://archives.neohapsis.com/archives/bugtraq/2002-03/0206.htmlVendor Advisory
• http://translate.google.com/translate?u=http%3A%2F%2Fwww.linux-sottises.net%2Findex.php%3Fnews_init%3D13%23newstag&langpair=fr%7Cen&hl=en&ie=UTF8&oe=UTF8&prev=%2Flanguage_tools
• http://www.iss.net/security_center/static/8477.phpPatch, Vendor Advisory
• http://www.linux-sottises.net/software/news-tnk/CHANGES
• http://www.securityfocus.com/bid/14145
• http://archives.neohapsis.com/archives/bugtraq/2002-03/0206.htmlVendor Advisory
• http://translate.google.com/translate?u=http%3A%2F%2Fwww.linux-sottises.net%2Findex.php%3Fnews_init%3D13%23newstag&langpair=fr%7Cen&hl=en&ie=UTF8&oe=UTF8&prev=%2Flanguage_tools
• http://www.iss.net/security_center/static/8477.phpPatch, Vendor Advisory
• http://www.linux-sottises.net/software/news-tnk/CHANGES
• http://www.securityfocus.com/bid/14145

Published

Aug 12, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-0452Foundry Networks ServerIron switches do not decode URIs when…
• CVE-2002-0453The account lockout capability in Oblix NetPoint 5.2 and ear…
• CVE-2002-0454Qpopper (aka in.qpopper or popper) 4.0.3 and earlier allows …
• CVE-2002-0455IncrediMail stores attachments in a directory with a fixed n…
• CVE-2002-0456Eudora 5.1 and earlier versions stores attachments in a dire…
• CVE-2002-0457Cross-site scripting vulnerability in signgbook.php for BG G…
• CVE-2002-0459Cross-site scripting vulnerability in Board-TNK 1.3.1 and ea…
• CVE-2002-0460Bitvise WinSSHD before 2002-03-16 allows remote attackers to…
• CVE-2002-0461Internet Explorer 5.01 through 6 allows remote attackers to …
• CVE-2002-0462bigsam_guestbook.php for Big Sam (Built-In Guestbook Stand-A…
• CVE-2002-0463home.php in ARSC (Really Simple Chat) 1.0.1 and earlier allo…
• CVE-2002-0464Directory traversal vulnerability in Hosting Controller 1.4.…