28 matches found
Multiple vulnerabilities in CyberMail
Overview CyberMail contains multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2020-5540 Open Redirect CWE-601 - CVE-2020-5541 Tony Kuo and Chia-Lung Hsieh of CHT Security reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security...
JVN#46258789: Multiple vulnerabilities in CyberMail
CyberMail contains multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2020-5540 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2| AV:N/AC:M/Au:N/C:N/I:P/A:N| Base Score: 4.3 Open Redirect CWE-601 -...
CyberSolutions CyberMail Cross-Site Scripting Vulnerability
CyberSolutions CyberMail is an e-mail system from CyberSolutions Japan. A cross-site scripting vulnerability exists in the 'ACTION' parameter of cgi-bin/go in Cyber??Solutions Cyber??Mail 5 and later versions. The vulnerability stems from a lack of proper validation of client-side data by the WEB...
CVE-2020-11734
cgi-bin/go in CyberSolutions CyberMail 5 or later allows XSS via the ACTION parameter...
CVE-2020-11734
cgi-bin/go in CyberSolutions CyberMail 5 or later allows XSS via the ACTION parameter...
Design/Logic Flaw
cgi-bin/go in CyberSolutions CyberMail 5 or later allows XSS via the ACTION parameter...
CVE-2020-11734
CVE-2020-11734 affects CyberSolutions CyberMail 5+ where the CGI script cgi-bin/go is vulnerable to XSS via the ACTION parameter due to insufficient input validation. The vulnerability enables injection of client-side script in the victim’s browser when interacting with CyberMail. Multiple source...
