Lucene search
PRIOn knowledge basePRION:CVE-2013-2585HistoryFeb 12, 2014 - 6:55 p.m.
Cross site scripting
2014-02-1218:55:00
PRIOn knowledge base
www.prio-n.com
6 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
56.3%
Cross-site scripting (XSS) vulnerability in Atmail Webmail Server 6.6.x before 6.6.3 and 7.0.x before 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php/mail/viewmessage/getattachment/folder/INBOX/uniqueId/<MessageID>/filenameOriginal/.
Related
cvelist
cvelist
CVE-2013-2585
2014-02-12 18:00:00
CVE-2013-6229
2014-02-12 15:00:00
cve
cve
CVE-2013-2585
2014-02-12 18:55:04
nessus
nessus
Atmail Webmail 6.6.x < 6.6.3 / 7.x < 7.0.3 File Name Parameter XSS
2014-04-18 00:00:00
packetstorm
packetstorm
Atmail WebMail 7.0.2 Cross Site Scripting
2013-03-27 00:00:00
prion
prion
Cross site scripting
2014-02-12 15:55:00
6 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
56.3%
Related for PRION:CVE-2013-2585