Lucene search

[email protected]CVE-2004-1196

HistoryJan 10, 2005 - 5:00 a.m.

CVE-2004-1196

2005-01-1005:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve

2004

1196

cross-site scripting

xss

inmail

insite

vulnerability

security

5.9 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

80.0%

JSON

Cross-site scripting (XSS) vulnerability in inmail.pl in Insite Inmail allows remote attackers to inject arbitrary web script or HTML via the acao parameter.

CPENameOperatorVersion
insite:inshopinsite inshopeq*
insite:inmailinsite inmaileq*

CPE	Name	Operator	Version
insite:inshop	insite inshop	eq	*
insite:inmail	insite inmail	eq	*

References

marc.info/?l=bugtraq&m=110140029419018&w=2

secunia.com/advisories/13188/

www.securityfocus.com/bid/11758

exchange.xforce.ibmcloud.com/vulnerabilities/18268

5.9 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

80.0%

JSON

Related for CVE-2004-1196

nessus1