PT-2004-2097 · Cmailserver · Cmailserver

Publicado 2004-12-05 · Atualizado 2017-07-11 · CVE-2004-1130

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: CMailServer version 5.2

Description: A cross-site scripting (XSS) issue exists, allowing remote attackers to execute arbitrary web script or HTML via personal information fields, such as username, name, or comments.

Recommendations: For CMailServer version 5.2, update the software to a version that fixes this issue, ensuring that input validation and sanitization are properly implemented for personal information fields, such as username, name, and comments, to prevent XSS attacks.

Correção

Identificadores relacionados

CVE-2004-1130

Produtos afetados

Cmailserver

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2004-1130 · Nota de Segurança
• http://securityfocus.com/bid/11742 · Correção
• http://security.org.sg/vuln/cmailserver52.html · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18280 · Nota
• http://marc.info/?l=bugtraq&m=110137313329955&w=2 · Nota