PT-2003-1259 · Emu · Emu Webmail

Publicado 2003-03-18 · Atualizado 2008-09-05 · CVE-2002-1526

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions EMU Webmail version 5.0

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary HTML or script via the email address field in emumail.cgi. This could potentially lead to unauthorized actions on the web application.

Recommendations For EMU Webmail version 5.0, update the emumail.cgi script to properly sanitize and validate user input in the email address field to prevent XSS attacks. As a temporary workaround, consider restricting access to the emumail.cgi script until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2002-1526

Produtos afetados

Emu Webmail

Referências · 5

• 🔥 https://exploit-db.com/exploits/21878 · Exploit
• 🔥 http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0131.html · Exploit
• 🔥 http://securityfocus.com/bid/5824 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1526 · Nota de Segurança
• http://iss.net/security_center/static/10205.php · Nota