CVE-2004-2379

2005-08-1604:00:00

mitre

www.cve.org

5.9 Medium

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.8%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in @Mail 3.64 for Windows allow remote attackers to inject arbitrary web script or HTML via (1) the Displayed Name attribute in util.pl and (2) the Folder attribute in showmail.pl.

References

members.lycos.co.uk/r34ct/main/%40mail_3.64/%40mail_3.64.txt

secunia.com/advisories/10978

www.osvdb.org/4066

www.osvdb.org/4067

www.securityfocus.com/bid/9748

www.securitytracker.com/alerts/2004/Feb/1009208.html

exchange.xforce.ibmcloud.com/vulnerabilities/15324