📦

sitespring

Vendor: macromedia

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 1 Code Available
Total RCEs 0 Remote Access
Total CVEs 4 Total Indexed
Avg. EPSS 2.82% Exploit Prob.
Latest CVE CVE-2002-1026 Oct 04

Security Vulnerability Index

Page 1 / 1
5.0 CVSS
CVE-2002-1026

Macromedia Sitespring 1.2.0 (277.1) using Sybase runtime engine 7.0.2.1480 allows remote attackers to cause a denial of service (crash) via a long malformed request to TCP port 2500, possibly triggering a buffer overflow.

EPSS: 2.82%
7.5 CVSS
CVE-2002-1027
Exploit Found

Cross-site scripting vulnerability in the default HTTP 500 error script (500error.jsp) for Macromedia Sitespring 1.2.0 (277.1) allows remote attackers to execute arbitrary web script via a link to 500error.jsp with the script in 1the et parameter.

EPSS: 2.82%