CVE-2002-0962

Cross-site scripting vulnerabilities in GeekLog 1.3.5 and earlier allow remote attackers to execute arbitrary script via (1) the url variable in the Link field of a calendar event, (2) the topic parameter in index.php, or (3) the title parameter in comment.php.

• http://archives.neohapsis.com/archives/bugtraq/2002-06/0058.html
• http://geeklog.sourceforge.net/article.php?story=20020610013358149
• http://www.iss.net/security_center/static/9309.phpPatch, Vendor Advisory
• http://www.iss.net/security_center/static/9310.phpPatch, Vendor Advisory
• http://www.securityfocus.com/bid/4969Exploit, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/4974Exploit, Patch, Vendor Advisory
• http://archives.neohapsis.com/archives/bugtraq/2002-06/0058.html
• http://geeklog.sourceforge.net/article.php?story=20020610013358149
• http://www.iss.net/security_center/static/9309.phpPatch, Vendor Advisory
• http://www.iss.net/security_center/static/9310.phpPatch, Vendor Advisory
• http://www.securityfocus.com/bid/4969Exploit, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/4974Exploit, Patch, Vendor Advisory

Published

Oct 4, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-0956BlackICE Agent 3.1.eal does not always reactivate after a sy…
• CVE-2002-0957The default configuration of BlackICE Agent 3.1.eal and 3.1.…
• CVE-2002-0958Cross-site scripting vulnerability in browse.php for PHP(Rea…
• CVE-2002-0959Cross-site scripting vulnerability in Splatt Forum 3.0 allow…
• CVE-2002-0960Multiple cross-site scripting vulnerabilities in Voxel Dot N…
• CVE-2002-0961Vulnerabilities in Voxel Dot Net CBMS 0.7 and earlier allow …
• CVE-2002-0963SQL injection vulnerability in comment.php for GeekLog 1.3.5…
• CVE-2002-0964Half-Life Server 1.1.1.0 and earlier allows remote attackers…
• CVE-2002-0965Buffer overflow in TNS Listener for Oracle 9i Database Serve…
• CVE-2002-0966Buffer overflow in 4D web server 6.7.3 allow remote attacker…
• CVE-2002-0967Buffer overflow in eDonkey 2000 35.16.60 and earlier allows …
• CVE-2002-0968Buffer overflow in AnalogX SimpleServer:WWW 1.16 and earlier…