CVEvulnerability

CVE-2002-0411

7.5 HIGH Published 2002-08-12 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-08-12
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Cross-site scripting vulnerability in message.php for AeroMail before 1.45 allows remote attackers to execute Javascript as an AeroMail user via an email message with the script in the Subject line.

Affected configurations

• aeromail aeromail 1.02 • aeromail aeromail 1.10 • aeromail aeromail 1.20 • aeromail aeromail 1.26 • aeromail aeromail 1.30 • aeromail aeromail 1.40

References