2 matches found
CVE-2005-0386
CVE-2005-0386 is an XSS vulnerability in mailreader's network.cgi before 2.3.29 that allows remote attackers to inject arbitrary script/HTML via MIME types text/enriched or text/richtext. Affected product: mailreader; root cause: missing input sanitising when displaying messages. Impact: remote, ...
MailReader.com 2.3.x - 'NPH-MR.cgi' File Disclosure
source: https://www.securityfocus.com/bid/6055/info A vulnerability exists in Mailreader.com which may enable remote attackers to disclose the contents of arbitrary webserver readable files. An attacker may exploit this issue by submitting a malicious web request containing dot-dot-slash ../...