4.3

CVE-2004-2334

Exploit
Multiple cross-site scripting (XSS) vulnerabilities in EMU Webmail 5.2.7 allow remote attackers to inject arbitrary web script or HTML via (1) a hex-encoded value to the variable parameter in emumail.fcgi, (2) the folder parameter in emumail.fcgi, or Javascript in the (3) username or (4) password field in the login page.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Emumail ≫ Emu Webmail Version5.2.7
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.78% 0.908
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://members.lycos.co.uk/r34ct/main/emu/emu.txt
Vendor Advisory
Exploit
http://secunia.com/advisories/11110
Vendor Advisory
http://securitytracker.com/id?1009397
Exploit
http://www.osvdb.org/4204
Exploit
http://www.osvdb.org/4972
Exploit
http://www.securityfocus.com/bid/9861
Exploit
http://www.zone-h.com/advisories/read/id=4141
Vendor Advisory
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/15451
https://exchange.xforce.ibmcloud.com/vulnerabilities/15452