CVEvulnerability
CVE-2004-2447
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in 1st Class Mail Server 4.01 allows remote attackers to inject arbitrary web script or HTML via the Mailbox parameter to (1) viewmail.tagz, (2) the index script under /user/, (3) members.tagz, (4) general.tagz, (5) advanced.tagz, or (6) list.tagz.
Affected configurations
• 1st class internet solutions 1st class mail server 4.01
References
- http://secunia.com/advisories/11330 Exploit, Vendor Advisory
- http://securitytracker.com/alerts/2004/Apr/1009705.html Exploit, Vendor Advisory
- http://www.osvdb.org/5012 Exploit
- http://www.osvdb.org/5013 Exploit
- http://www.osvdb.org/5014 Exploit
- http://www.osvdb.org/5015 Exploit
- http://www.osvdb.org/5016 Exploit
- http://www.osvdb.org/5017 Exploit
- http://www.securityfocus.com/bid/10089 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15815 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/11330 Exploit, Vendor Advisory
- http://securitytracker.com/alerts/2004/Apr/1009705.html Exploit, Vendor Advisory
- http://www.osvdb.org/5012 Exploit
- http://www.osvdb.org/5013 Exploit
- http://www.osvdb.org/5014 Exploit
- http://www.osvdb.org/5015 Exploit
- http://www.osvdb.org/5016 Exploit
- http://www.osvdb.org/5017 Exploit
- http://www.securityfocus.com/bid/10089 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15815 exchange.xforce.ibmcloud.com