4 matches found
CVE-2004-1100
The CVE-2004-1100 entry documents a cross-site scripting (XSS) flaw in MailPost 5.1.1sv (and possibly earlier versions) where, when debug mode is enabled, an attacker can inject arbitrary web script or HTML via the append parameter. The data here do not include a published fix or patch within the...
CVE-2004-1101
The CVE-2004-1101 entry concerns MailPost 5.1.1sv (and possibly earlier) and documents three issues: (1) remote denial of service causing a server crash, (2) leakage of sensitive pathname information in error messages, and (3) a cross-site scripting (XSS) vector triggered by an HTTP request conta...
CVE-2004-1102
MailPost 5.1.1sv (and possibly earlier) is affected by an information disclosure vulnerability where the error message varies depending on whether the requested file exists. This behavior can allow remote attackers to gain sensitive information. The CVE entry states the issue but does not provide...
CVE-2004-1103
CVE-2004-1103 affects MailPost 5.1.1sv (and possibly earlier) when debug mode is enabled. The vulnerability allows remote attackers to retrieve sensitive information via the debug parameter, revealing details such as the web root path and the web server version. According to NVD, the impact is pa...