CVE-2002-0166

CVE-2002-0166 describes a cross-site scripting (XSS) vulnerability in analog web server versions prior to 5.22. This flaw allows remote attackers to inject and execute JavaScript code by including it within an HTTP request, which is then logged and improperly filtered when analog displays the web logfile. With a CVSS score of 7.5, this vulnerability is considered highly severe, allowing for potential compromise of user sessions and data theft due to its network-based attack vector and low attack complexity. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.