CVE-2004-2625

Опубликовано: 31 дек. 2004

Источник: nvd

CVSS2: 5.1

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in Outblaze Email allows remote attackers to inject arbitrary web script or HTML via Javascript in an attribute of an IMG tag.

Ссылки

http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0733.html
Exploit
http://secunia.com/advisories/12084
Patch
Vendor Advisory
http://securitytracker.com/alerts/2004/Jul/1010735.html
Exploit
http://www.osvdb.org/8104
http://www.securiteam.com/securitynews/5CP0O20DFI.html
Exploit
http://www.securityfocus.com/bid/10756
http://www.swp-zone.org/archivos/advisory-09.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/16788
http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0733.html
Exploit
http://secunia.com/advisories/12084
Patch
Vendor Advisory
http://securitytracker.com/alerts/2004/Jul/1010735.html
Exploit
http://www.osvdb.org/8104
http://www.securiteam.com/securitynews/5CP0O20DFI.html
Exploit
http://www.securityfocus.com/bid/10756
http://www.swp-zone.org/archivos/advisory-09.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/16788

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:outblaze:outblaze_email:*:*:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.01027

Низкий

5.1 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-j959-4486-mmwm

github

почти 4 года назад