CVE-2004-0588 Cross-site scripting (XSS) vulnerability in the web mail module for Usermin 1.070 allows remote attackers to insert arbitrary HTML and script via e-mail messages.
MediumCVSS 6.8
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the web mail module for Usermin 1.070 allows remote attackers to insert arbitrary HTML and script via e-mail messages.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| usermin | = 1.070 | No fix listed |
References
- 20040611 [SNS Advisory No.73] Usermin Cross-site Scripting Vulnerability mailing-list
- GLSA-200406-15 patch vendor-advisory
- www.lac.co.jp
- 10521 patch vdb-entry
- usermin-email-xss(16494) vdb-entry