Lucene search
K
TipsMailpost

4 matches found

CVE
CVE
added 2004/12/01 5:0 a.m.51 views

CVE-2004-1100

The CVE-2004-1100 entry documents a cross-site scripting (XSS) flaw in MailPost 5.1.1sv (and possibly earlier versions) where, when debug mode is enabled, an attacker can inject arbitrary web script or HTML via the append parameter. The data here do not include a published fix or patch within the...

6.8CVSS6.4AI score0.05133EPSS
CVE
CVE
added 2004/12/01 5:0 a.m.51 views

CVE-2004-1101

The CVE-2004-1101 entry concerns MailPost 5.1.1sv (and possibly earlier) and documents three issues: (1) remote denial of service causing a server crash, (2) leakage of sensitive pathname information in error messages, and (3) a cross-site scripting (XSS) vector triggered by an HTTP request conta...

5.8CVSS6.6AI score0.06045EPSS
CVE
CVE
added 2004/12/01 5:0 a.m.47 views

CVE-2004-1102

MailPost 5.1.1sv (and possibly earlier) is affected by an information disclosure vulnerability where the error message varies depending on whether the requested file exists. This behavior can allow remote attackers to gain sensitive information. The CVE entry states the issue but does not provide...

5CVSS7.3AI score0.0879EPSS
CVE
CVE
added 2004/12/01 5:0 a.m.45 views

CVE-2004-1103

CVE-2004-1103 affects MailPost 5.1.1sv (and possibly earlier) when debug mode is enabled. The vulnerability allows remote attackers to retrieve sensitive information via the debug parameter, revealing details such as the web root path and the web server version. According to NVD, the impact is pa...

5CVSS7.1AI score0.02763EPSS