Approved changes feed: RSS · Atom

cpe:2.3:a:w3m:w3m:0.3.2:*:*:*:*:*:*:*

part: a version: 0.3.2 update: *

VendorW3M (70eaa1cc-f779-54cb-9e78-ee92eecd266c)
ProductW3M (cc15529b-38a2-5717-a15e-2b636fd81fcf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2002-1348 vulnerable 2026-06-08 04:46:23.500872 Details available
w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag, which could allow remote attackers to access files or cookies.
Published: 2004-09-01T04:00:00.000Z
Updated: 2024-08-08T03:19:28.827Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1335 vulnerable 2026-06-08 04:46:23.454588 Details available
Cross-site scripting (XSS) vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attackers to insert arbitrary web script or HTML and access files or cookies.
Published: 2002-12-03T05:00:00.000Z
Updated: 2024-08-08T03:19:28.602Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.