PT-2003-1259 · Emu · Emu Webmail

Published 2003-03-18 · Updated 2008-09-05 · CVE-2002-1526

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions EMU Webmail version 5.0

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary HTML or script via the email address field in emumail.cgi. This could potentially lead to unauthorized actions on the web application.

Recommendations For EMU Webmail version 5.0, update the emumail.cgi script to properly sanitize and validate user input in the email address field to prevent XSS attacks. As a temporary workaround, consider restricting access to the emumail.cgi script until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2002-1526

Affected Products

Emu Webmail

References · 5

• 🔥 https://exploit-db.com/exploits/21878 · Exploit
• 🔥 http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0131.html · Exploit
• 🔥 http://securityfocus.com/bid/5824 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1526 · Security Note
• http://iss.net/security_center/static/10205.php · Note