CVE-2004-1719 Multiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) category, (2) cserver, (3) ext, (4) global,....
MediumCVSS 4.3
EPSS 5.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) category, (2) cserver, (3) ext, (4) global, (5) showgroups, (6) or showlite parameters to address.html, or the (7) spage or (8) autoresponder parameters to settings.html, the (9) folder parameter to readmail.html, or the (10) attachmentpage_text_error parameter to attachment.html, (11) folder, (12) ct, or (13) cv parameters to calendar.html, (14) an <img> tag, or (15) the subject of an e-mail message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| merak mail server | = 7.4.5 | No fix listed |
References
- 20040817 Vulnerabilities in Merak Webmail Server mailing-list
- packetstormsecurity.nl exploit patch vendor-advisory
- 12269 exploit patch third-party-advisory vendor-advisory
- 1010969 vdb-entry
- 9037 patch vdb-entry vendor-advisory
- 9038 patch vdb-entry vendor-advisory
- 9039 patch vdb-entry vendor-advisory
- 9040 patch vdb-entry vendor-advisory
- 9041 patch vdb-entry vendor-advisory
- 9042 patch vdb-entry vendor-advisory
- 10966 exploit patch vdb-entry vendor-advisory
- merak-xss(17024) vdb-entry