5 matches found
CVE-2002-0531: Undefined Security Weakness
Directory traversal vulnerability in emumail.cgi in EMU Webmail 4.5.x and 5.1.0 allows remote attackers to read arbitrary files or list arbitrary directories via a .. dot dot in the type parameter...
CVE-2002-1526
The CVE-2002-1526 entry describes a Cross-site scripting (XSS) vulnerability in EMU Webmail 5.0, specifically in the emumail.cgi handler. The underlying issue allows an attacker to inject arbitrary HTML or script via the email address field, enabling remote exploitation against affected deploymen...
CVE-2002-1527
The CVE-2002-1527 entry concerns EMU Webmail 5.0’s emumail.cgi. A remote attacker can determine the full pathname for emumail.cgi by sending a malformed string containing script, which triggers a regular expression matching error that exposes the pathname in the resulting error message. Affected ...
CVE-2002-1527: Undefined Security Weakness
emumail.cgi in EMU Webmail 5.0 allows remote attackers to determine the full pathname for emumail.cgi via a malformed string containing script, which generates a regular expression matching error that includes the pathname in the resulting error message...
CVE-2002-1526: Undefined Security Weakness
Cross-site scripting XSS vulnerability in emumail.cgi for EMU Webmail 5.0 allows remote attackers to inject arbitrary HTML or script via the email address field...