CVE-2002-1495

Cross-site scripting XSS vulnerability in JAWmail 1.0-rc1 allows remote attackers to insert arbitrary script or HTML via 1 attached file names in the Read Mail feature, 2 text/html mails that are displayed in a pop-up window, and 3 certain malicious attributes within otherwise safe tags, such as...

CVE-2002-1495

The CVE-2002-1495 entry documents a Cross-site scripting (XSS) vulnerability in JAWmail 1.0-rc1. The vulnerability allows remote attackers to inject arbitrary script or HTML through multiple vectors: (1) attached file names in the Read Mail feature, (2) text/html mails displayed in a pop-up windo...