CVE-2002-1785: Zeus Technologies Zeus Web Server

Low severity, CVSS 1.9. EPSS: 2.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Zeus Administration Server in Zeus Web Server 4.0 through 4.1r2 allows remote authenticated users to inject arbitrary web script or HTML via the section parameter to index.fcgi.

Affected products

• Zeus Technologies Zeus Web Server: version 4.0 only; version 4.1 only; version 4.1_r1 only; version 4.1_r2 only; version 4.1_r3 only; version 4.1_r4 only

Published 2002-12-31. Last modified 2026-06-16.