CVE-2004-2447

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2004-2447
Cross-site scripting (XSS) vulnerability in 1st Class Mail Server 4.01 allows remote attackers to inject arbitrary web script or HTML via the Mailbox parameter to (1) viewmail.tagz, (2) the index script under /user/, (3) members.tagz, (4) general.tagz, (5) advanced.tagz, or (6) list.tagz.

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
http://secunia.com/advisories/11330 Exploit Vendor Advisory
http://securitytracker.com/alerts/2004/Apr/1009705.html Exploit Vendor Advisory
http://www.osvdb.org/5012 Exploit
http://www.osvdb.org/5013 Exploit
http://www.osvdb.org/5014 Exploit
http://www.osvdb.org/5015 Exploit
http://www.osvdb.org/5016 Exploit
http://www.osvdb.org/5017 Exploit
http://www.securityfocus.com/bid/10089 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/15815
http://secunia.com/advisories/11330 Exploit Vendor Advisory
http://securitytracker.com/alerts/2004/Apr/1009705.html Exploit Vendor Advisory
http://www.osvdb.org/5012 Exploit
http://www.osvdb.org/5013 Exploit
http://www.osvdb.org/5014 Exploit
http://www.osvdb.org/5015 Exploit
http://www.osvdb.org/5016 Exploit
http://www.osvdb.org/5017 Exploit
http://www.securityfocus.com/bid/10089 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/15815
Configurations

Configuration 1 (hide)

cpe:2.3:a:1st_class_internet_solutions:1st_class_mail_server:4.01:*:*:*:*:*:*:*
History

20 Nov 2024, 23:53

Type Values Removed Values Added
References () http://secunia.com/advisories/11330 - Exploit, Vendor Advisory () http://secunia.com/advisories/11330 - Exploit, Vendor Advisory
References () http://securitytracker.com/alerts/2004/Apr/1009705.html - Exploit, Vendor Advisory () http://securitytracker.com/alerts/2004/Apr/1009705.html - Exploit, Vendor Advisory
References () http://www.osvdb.org/5012 - Exploit () http://www.osvdb.org/5012 - Exploit
References () http://www.osvdb.org/5013 - Exploit () http://www.osvdb.org/5013 - Exploit
References () http://www.osvdb.org/5014 - Exploit () http://www.osvdb.org/5014 - Exploit
References () http://www.osvdb.org/5015 - Exploit () http://www.osvdb.org/5015 - Exploit
References () http://www.osvdb.org/5016 - Exploit () http://www.osvdb.org/5016 - Exploit
References () http://www.osvdb.org/5017 - Exploit () http://www.osvdb.org/5017 - Exploit
References () http://www.securityfocus.com/bid/10089 - Exploit () http://www.securityfocus.com/bid/10089 - Exploit
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/15815 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/15815 -
Information

Published : 2004-12-31 05:00

Updated : 2025-04-03 01:03

NVD link : CVE-2004-2447

Mitre link : CVE-2004-2447

CVE.ORG link : CVE-2004-2447

JSON object : View

Products Affected

1st_class_internet_solutions

  • 1st_class_mail_server
CWE
NVD-CWE-Other