CVEvulnerability
CVE-2002-1958
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2002-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in kmMail 1.0, 1.0a, and 1.0b allows remote attackers to inject arbitrary web script or HTML via (1) javascript in onmouseover or other attributes in "safe" HTML tags such as the "b" tag, or (2) the Subject field.
Affected configurations
• kmmail kmmail 1.0
• kmmail kmmail 1.0a
• kmmail kmmail 1.0b
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2002-October/002207.html lists.grok.org.uk
- http://sourceforge.net/forum/forum.php?forum_id=191501 Patch
- http://www.iss.net/security_center/static/9507.php Patch
- http://www.securityfocus.com/bid/5173 Patch
- http://www.securityfocus.com/bid/6013 www.securityfocus.com
- http://lists.grok.org.uk/pipermail/full-disclosure/2002-October/002207.html lists.grok.org.uk
- http://sourceforge.net/forum/forum.php?forum_id=191501 Patch
- http://www.iss.net/security_center/static/9507.php Patch
- http://www.securityfocus.com/bid/5173 Patch
- http://www.securityfocus.com/bid/6013 www.securityfocus.com