CVE-2004-2494

2005-10-2504:00:00

mitre

www.cve.org

AI Score

5.7

Confidence

High

EPSS

0.009

Percentile

82.9%

JSON

Cross-site scripting (XSS) vulnerability in _error in Ability Mail Server 1.18 allows remote attackers to inject arbitrary web script or HTML via the erromsg parameter.

References

members.lycos.co.uk/r34ct/main/Ability_mail_server_1.18.txt

secunia.com/advisories/12039

securitytracker.com/id?1010672

www.osvdb.org/7718

www.securityfocus.com/bid/10695

exchange.xforce.ibmcloud.com/vulnerabilities/16676