CVE-2002-0411

Опубликовано: 12 авг. 2002

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Cross-site scripting vulnerability in message.php for AeroMail before 1.45 allows remote attackers to execute Javascript as an AeroMail user via an email message with the script in the Subject line.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2002-03/0004.html
Exploit
Vendor Advisory
http://the.cushman.net/projects/aeromail/download/aeromail-1.45.tar.gz
http://www.iss.net/security_center/static/8346.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/4215
Patch
Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-03/0004.html
Exploit
Vendor Advisory
http://the.cushman.net/projects/aeromail/download/aeromail-1.45.tar.gz
http://www.iss.net/security_center/static/8346.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/4215
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:aeromail:aeromail:1.02:*:*:*:*:*:*:*

cpe:2.3:a:aeromail:aeromail:1.10:*:*:*:*:*:*:*

cpe:2.3:a:aeromail:aeromail:1.20:*:*:*:*:*:*:*

cpe:2.3:a:aeromail:aeromail:1.26:*:*:*:*:*:*:*

cpe:2.3:a:aeromail:aeromail:1.30:*:*:*:*:*:*:*

cpe:2.3:a:aeromail:aeromail:1.40:*:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.0108

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-v7h4-hhwc-qr2c

github

почти 4 года назад