CVE-2002-0521: Cross-site scripting vulnerabilities in ASP-Nuke RC2 and earlier allow remote attackers to execute script o...

Security readout for executives and security teams

CVE-2002-0521 is an old cross-site scripting issue in ASP-Nuke RC2 and earlier. A malicious user could place script content into specific profile, post, or download fields and have it run in another user’s browser, potentially acting as that user inside the site. Exposure is likely limited to legacy public or internal ASP-Nuke deployments at RC2 or earlier. Organizations without ASP-Nuke are not affected based on the provided sources. Treat this as a legacy exposure cleanup item unless ASP-Nuke is still deployed. If found on a public site, prioritize removal, isolation, or vendor-guided remediation because account-context script execution can affect users and administrators. Mitigation focus: Inventory internet-facing and internal sites for ASP-Nuke RC2 or earlier.; Check ASP-Nuke vendor guidance and archived advisories for the appropriate update path.; Retire or isolate unsupported ASP-Nuke deployments where vendor fixes cannot be confirmed..

Prepared

Jul 1, 2026, 06:51 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.