CVE-2002-1703: Mewsoft Netauction

Medium severity, CVSS 6.8. EPSS: 4.2% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability (XSS) in auction.cgi for Mewsoft NetAuction 3.0 allows remote attackers to execute arbitrary script as other users via the Term parameter.

Affected products

• Mewsoft Netauction: version 3.0 only

Published 2002-12-31. Last modified 2026-06-16.