CVE-2004-1100 Cross-site scripting (XSS) vulnerability in mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to execute arbitrary web script or HTML...
MediumCVSS 6.8
EPSS 5.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to execute arbitrary web script or HTML via the append parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tips mailpost | = 5.1.1sv | No fix listed |
References
- VU#107998 third-party-advisory us-government-resource
- www.procheckup.com
- 11596 exploit vdb-entry
- mailpost-append-xss(17953) vdb-entry