本頁列出影響 open_source_development_network slashcode 的已公開 CVE 漏洞（透過 NVD CPE 關聯）。每列包含嚴重程度評分、摘要與發布日期，便於識別與分析安全議題。
| CVE | 摘要 | 來源 | 最高 CVSS | EPSS % | 公開時間 | 更新時間 |
|---|---|---|---|---|---|---|
| CVE-2004-2656 | Multiple cross-site scripting (XSS) vulnerabilities in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) before R_2_5_0_41 allow remote attackers to inject arbitrary web script or HTML via (1) the topic parameter in search.pl and (2) the filter parameter in submit.pl. | [email protected] | 4.3 | 0.87% | 2004-12-31 | 2026-04-16 |
| CVE-2002-1748 | Unknown vulnerability in Slash 2.1.x and 2.2 through 2.2.2, as used in Slashcode, allows remote authenticated users to gain access to arbitrary accounts. | [email protected] | 7.2 | 0.42% | 2002-12-31 | 2026-04-16 |
| CVE-2002-1681 | Cross-site scripting (XSS) vulnerability in Slashcode CVS releases June 17 through July 1 2002 allows remote attackers to execute arbitrary script as other users by injecting script into the paragraph <P> tag. | [email protected] | 6.8 | 0.85% | 2002-12-31 | 2026-04-16 |
| CVE-2002-0292 | Cross-site scripting vulnerability in Slash before 2.2.5, as used in Slashcode and elsewhere, allows remote attackers to steal cookies and authentication information from other users via Javascript in a URL, possibly in the formkey field. | [email protected] | 2.6 | 1.03% | 2002-05-31 | 2026-04-16 |
| CVE-2001-1535 | Slashcode 2.0 creates new accounts with an 8-character random password, which could allow local users to obtain session ID's from cookies and gain unauthorized access via a brute force attack. | [email protected] | 4.6 | 0.15% | 2001-12-31 | 2026-04-16 |
| CVE-2000-1015 | The default configuration of Slashcode before version 2.0 Alpha has a default administrative password, which allows remote attackers to gain Slashcode privileges and possibly execute arbitrary commands. | [email protected] | 7.5 | 1.22% | 2000-12-11 | 2026-04-16 |