Lucene search
HistoryNov 29, 2011 - 12:55 a.m.
CVE-2011-4541
cve
2011
4541
xss
vulnerability
hastymail2
index.php
remote attackers
web script
html
drafts action
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.8 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
58.4%
Cross-site scripting (XSS) vulnerability in index.php in Hastymail2 2.1.1 before RC2 allows remote attackers to inject arbitrary web script or HTML via the rs parameter in a mailbox Drafts action.
Affected configurations
Node
hastymailhastymail2beta1
ORhastymailhastymail2beta2
ORhastymailhastymail2beta3
ORhastymailhastymail2rc1
ORhastymailhastymail2rc2
ORhastymailhastymail2rc3
ORhastymailhastymail2rc4
ORhastymailhastymail2rc5
ORhastymailhastymail2rc6
ORhastymailhastymail2rc7
ORhastymailhastymail2rc8
ORhastymailhastymail2rc9
ORhastymailhastymail2Range≤2.1.1rc1
ORhastymailhastymail2Match1.0
ORhastymailhastymail2Match1.01
ORhastymailhastymail2Match1.1rc1
ORhastymailhastymail2Match1.1rc2
ORhastymailhastymail2Match2.0
ORhastymailhastymail2Match2.0a1
ORhastymailhastymail2Match2.0a2
ORhastymailhastymail2Match2.0b1
ORhastymailhastymail2Match2.0b2
ORhastymailhastymail2Match2.0b3
ORhastymailhastymail2Match2.0rc1
ORhastymailhastymail2Match2.0.1
ORhastymailhastymail2Match2.0.2
ORhastymailhastymail2Match2.0.3
ORhastymailhastymail2Match2.0.4
ORhastymailhastymail2Match2.0.5
Related
openvas
openvas
Hastymail2 < 2.1.1 RC2 XSS Vulnerability
2011-11-24 00:00:00
Hastymail2 'rs' Parameter Cross Site Scripting Vulnerability
2011-11-24 00:00:00
cvelist
cvelist
CVE-2011-4541
2011-11-29 00:00:00
nvd
nvd
CVE-2011-4541
2011-11-29 00:55:01
prion
prion
Cross site scripting
2011-11-29 00:55:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.8 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
58.4%
Related for CVE-2011-4541