Lucene search
HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-1282
cve
2005
1282
cross-site scripting
xss
argosoft mail server pro
webmail interface
security vulnerability
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.8 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
68.9%
Multiple cross-site scripting (XSS) vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote attackers to inject arbitrary web script or HTML via (1) the src parameter in an IMG tag, (2) User settings, or (3) Address book input boxes in the webmail interface.
Affected configurations
Node
argosoftargosoft_mail_serverMatch1.8.7.6pro
| CPE | Name | Operator | Version |
|---|---|---|---|
| argosoft:argosoft_mail_server | argosoft argosoft mail server | eq | 1.8.7.6 |
Related
cvelist
cvelist
CVE-2005-1282
2005-04-26 04:00:00
nvd
nvd
CVE-2005-1282
2005-05-02 04:00:00
nessus
nessus
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.8 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
68.9%
Related for CVE-2005-1282