7.5
CVSSv2

CVE-2002-0411

Published: 12/08/2002 Updated: 05/09/2008
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Cross-site scripting vulnerability in message.php for AeroMail prior to 1.45 allows remote malicious users to execute Javascript as an AeroMail user via an email message with the script in the Subject line.

Vulnerable Product Search on Vulmon Subscribe to Product

aeromail aeromail 1.10

aeromail aeromail 1.20

aeromail aeromail 1.26

aeromail aeromail 1.30

aeromail aeromail 1.02

aeromail aeromail 1.40