CVE-2002-1027

Cross-site scripting vulnerability in the default HTTP 500 error script (500error.jsp) for Macromedia Sitespring 1.2.0 (277.1) allows remote attackers to execute arbitrary web script via a link to 500error.jsp with the script in 1the et parameter.

• http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0029.html
• http://online.securityfocus.com/archive/1/282742
• http://www.iss.net/security_center/static/9588.phpVendor Advisory
• http://www.securityfocus.com/bid/5249Exploit, Vendor Advisory
• http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0029.html
• http://online.securityfocus.com/archive/1/282742
• http://www.iss.net/security_center/static/9588.phpVendor Advisory
• http://www.securityfocus.com/bid/5249Exploit, Vendor Advisory

Published

Oct 4, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-1021BadBlue server allows remote attackers to read restricted fi…
• CVE-2002-1022BadBlue server stores passwords in plaintext in the ext.ini …
• CVE-2002-1023BadBlue server allows remote attackers to cause a denial of …
• CVE-2002-1024Cisco IOS 12.0 through 12.2, when supporting SSH, allows rem…
• CVE-2002-1025JRun 3.0 through 4.0 allows remote attackers to read JSP sou…
• CVE-2002-1026Macromedia Sitespring 1.2.0 (277.1) using Sybase runtime eng…
• CVE-2002-1028Multiple buffer overflows in the CGI programs for Oddsock So…
• CVE-2002-1029Res Manager in Worldspan for Windows Gateway 4.1 allows remo…
• CVE-2002-1030Race condition in Performance Pack in BEA WebLogic Server an…
• CVE-2002-1031KeyFocus (KF) web server 1.0.2 allows remote attackers to li…
• CVE-2002-1032Buffer overflow in KeyFocus (KF) web server 1.0.5 and earlie…
• CVE-2002-1033Directory traversal vulnerability in none.php for SunPS iRun…