← CVECheck
HomeVulnerabilities

CVE-2002-1685 — MEDIUM severity vulnerability (Cross-site scripting vulnerability (XSS) in BadBlue Enterpri)

Cross-site scripting vulnerability (XSS) in BadBlue Enterprise Edition and Personal Edition 1.7 and 1.7.2 allows remote attackers to execute arbitrary script as other users by injecting script into ext.dll ISAPI.

CVE IDCVE-2002-1685
SeverityMEDIUM
CVSS score4.3
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N
CWENVD-CWE-Other
StatusModified
Published2002-12-31
Last modified2026-04-16
DescriptionCross-site scripting vulnerability (XSS) in BadBlue Enterprise Edition and Personal Edition 1.7 and 1.7.2 allows remote attackers to execute arbitrary script as other users by injecting script into ext.dll ISAPI.
SourceNIST National Vulnerability Database

🔍 Search all vulnerabilities →