CVE-2002-2062

Cross-site scripting (XSS) vulnerability in ftp.htt in Internet Explorer 5.5 and 6.0, when running on Windows 2000 with "Enable folder view for FTP sites" and "Enable Web content in folders" selected, allows remote attackers to inject arbitrary web script or HTML via the hostname portion of an FTP URL.

• http://archives.neohapsis.com/archives/bugtraq/2002-06/0037.htmlExploit, Vendor Advisory
• http://www.geocities.co.jp/SiliconValley/1667/advisory02e.htmlExploit, Vendor Advisory
• http://www.iss.net/security_center/static/9290.php
• http://www.securityfocus.com/bid/4954Exploit
• http://archives.neohapsis.com/archives/bugtraq/2002-06/0037.htmlExploit, Vendor Advisory
• http://www.geocities.co.jp/SiliconValley/1667/advisory02e.htmlExploit, Vendor Advisory
• http://www.iss.net/security_center/static/9290.php
• http://www.securityfocus.com/bid/4954Exploit

Published

Dec 31, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-2056Cross-site scripting (XSS) vulnerability in TeeKai Forum 1.2…
• CVE-2002-2057TeeKai Forum 1.2 uses weak encryption of web usage statistic…
• CVE-2002-2058TeeKai Tracking Online 1.0 uses weak encryption of web usage…7.5
• CVE-2002-2059BIOS D845BG, D845HV, D845PT and D845WN on Intel motherboards…
• CVE-2002-2060Buffer overflow in Links 2.0 pre4 allows remote attackers to…
• CVE-2002-2061Heap-based buffer overflow in Netscape 6.2.3 and Mozilla 1.0…
• CVE-2002-2063AtGuard 3.2 allows remote attackers to bypass firwall filter…
• CVE-2002-2064isadmin.php in PhpWebGallery 1.0 allows remote attackers to …
• CVE-2002-2065WebCalendar 0.9.34 and earlier with 'browsing in includes di…
• CVE-2002-2066BestCrypt BCWipe 1.0.7 and 2.0 through 2.35.1 does not clear…7.5
• CVE-2002-2067East-Tec Eraser 2002 does not clear Windows alternate data s…7.5
• CVE-2002-2068Eraser 5.3 does not clear Windows alternate data streams tha…7.5