{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-01T05:33:59.468","vulnerabilities":[{"cve":{"id":"CVE-2002-0292","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2026-06-16T21:57:09.517","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Slash before 2.2.5, as used in Slashcode and elsewhere, allows remote attackers to steal cookies and authentication information from other users via Javascript in a URL, possibly in the formkey field."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en Slash anteriores a 2.2.5, como los usados en Slashcode y otros sitios, permite a atacantes remotos robar cookies e información de autentificación de otros usuarios, mediante Javascript en una URL, probablemente en el campo formkey."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.8","matchCriteriaId":"F30590C0-E506-42E8-9C55-11C836D59A6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:2.0:*:*:*:*:*:*:*","matchCriteriaId":"77BC88D3-88A6-4C97-8463-F78BC0A9C4F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:2.1:*:*:*:*:*:*:*","matchCriteriaId":"B9FD066C-B64A-46CB-A9AA-F6347E544134"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1520586E-C02B-47C6-BABD-80636ACA6226"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:2.2:*:*:*:*:*:*:*","matchCriteriaId":"BD921000-F257-450D-92F4-B6411D46FC21"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"552A39DD-FEE3-4459-AC86-1906D3AC35AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"3138C055-1054-4F7A-8B80-8A6EA3B44528"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"FBE6597C-E7EC-4A53-9B72-925F252EE0E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5D667AE2-4F32-411D-84C4-AF1C066D3027"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101414005501708&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8221.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4116","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101414005501708&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8221.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4116","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}