PT-2004-2097 · Cmailserver · Cmailserver

Published 2004-12-05 · Updated 2017-07-11 · CVE-2004-1130

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: CMailServer version 5.2

Description: A cross-site scripting (XSS) issue exists, allowing remote attackers to execute arbitrary web script or HTML via personal information fields, such as username, name, or comments.

Recommendations: For CMailServer version 5.2, update the software to a version that fixes this issue, ensuring that input validation and sanitization are properly implemented for personal information fields, such as username, name, and comments, to prevent XSS attacks.

Fix

Related Identifiers

CVE-2004-1130

Affected Products

Cmailserver

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2004-1130 · Security Note
• http://securityfocus.com/bid/11742 · Patch
• http://security.org.sg/vuln/cmailserver52.html · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18280 · Note
• http://marc.info/?l=bugtraq&m=110137313329955&w=2 · Note