CVEvulnerability
CVE-2004-1719
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-08-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Multiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) category, (2) cserver, (3) ext, (4) global, (5) showgroups, (6) or showlite parameters to address.html, or the (7) spage or (8) autoresponder parameters to settings.html, the (9) folder parameter to readmail.html, or the (10) attachmentpage_text_error parameter to attachment.html, (11) folder, (12) ct, or (13) cv parameters to calendar.html, (14) an <img> tag, or (15) the subject of an e-mail message.
Affected configurations
• merak mail server 7.4.5
References
- http://marc.info/?l=bugtraq&m=109279057326044&w=2 marc.info
- http://packetstormsecurity.nl/0408-exploits/merak527.txt Exploit, Patch, Vendor Advisory
- http://secunia.com/advisories/12269 Exploit, Patch, Vendor Advisory
- http://securitytracker.com/id?1010969 securitytracker.com
- http://www.osvdb.org/9037 Patch, Vendor Advisory
- http://www.osvdb.org/9038 Patch, Vendor Advisory
- http://www.osvdb.org/9039 Patch, Vendor Advisory
- http://www.osvdb.org/9040 Patch, Vendor Advisory
- http://www.osvdb.org/9041 Patch, Vendor Advisory
- http://www.osvdb.org/9042 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/10966 Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17024 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=109279057326044&w=2 marc.info
- http://packetstormsecurity.nl/0408-exploits/merak527.txt Exploit, Patch, Vendor Advisory
- http://secunia.com/advisories/12269 Exploit, Patch, Vendor Advisory
- http://securitytracker.com/id?1010969 securitytracker.com
- http://www.osvdb.org/9037 Patch, Vendor Advisory
- http://www.osvdb.org/9038 Patch, Vendor Advisory
- http://www.osvdb.org/9039 Patch, Vendor Advisory
- http://www.osvdb.org/9040 Patch, Vendor Advisory
- http://www.osvdb.org/9041 Patch, Vendor Advisory
- http://www.osvdb.org/9042 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/10966 Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17024 exchange.xforce.ibmcloud.com