CVE-2002-0230 describes a cross-site scripting (XSS) vulnerability in Faq-O-Matic versions 2.712 and earlier. This flaw allows remote attackers to inject arbitrary JavaScript into error messages via the 'cmd' parameter, affecting other clients browsing the vulnerable application. With a CVSS score of 5.0 (AV:N/AC:L/Au:N/C:N/I:P/A:N), it is a medium-severity vulnerability, indicating low attack complexity and potential for information disclosure or session hijacking. While not on the KEV catalog or Hot List, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.712CPE matchmatch criteria | cpe:2.3:a:faq-o-matic:faq-o-matic:2.712:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:N/I:P/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.