2 matches found
CVE-2005-0386
CVE-2005-0386 is an XSS vulnerability in mailreader's network.cgi before 2.3.29 that allows remote attackers to inject arbitrary script/HTML via MIME types text/enriched or text/richtext. Affected product: mailreader; root cause: missing input sanitising when displaying messages. Impact: remote, ...
4.3CVSS5.5AI score0.01028EPSS
SaveExploits0References2Affected Software1
MailReader.com 2.3.x - 'NPH-MR.cgi' File Disclosure
source: https://www.securityfocus.com/bid/6055/info A vulnerability exists in Mailreader.com which may enable remote attackers to disclose the contents of arbitrary webserver readable files. An attacker may exploit this issue by submitting a malicious web request containing dot-dot-slash ../...
5CVSS5.8AI score0.0764EPSS
SaveExploits2
20