CVE-2002-0938

CVE Database · CVE-2002-0938

CVE-2002-0938

· N/AModified

CVSS v3.1

N/A

EPSS

3.06%

Published

Oct 4, 2002

Modified

Apr 15, 2026

Public PoC / Exploit (1)

All weaponized →

Exploit-DBCisco Secure ACS for Windows NT 3.0 - Cross-Site Scripting

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting vulnerability in CiscoSecure ACS 3.0 allows remote attackers to execute arbitrary script or HTML as other web users via the action argument in a link to setup.exe.

Affected Products (2)

cisco · secure_access_control_servervulnerable

References (8)

http://archives.neohapsis.com/archives/bugtraq/2002-06/0156.html

http://online.securityfocus.com/archive/1/278222

http://www.iss.net/security_center/static/9353.php

Vendor Advisory

http://www.securityfocus.com/bid/5026

ExploitVendor Advisory