6.8
CVSSv2

CVE-2004-1196

Published: 10/01/2005 Updated: 11/07/2017
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 685
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in inmail.pl in Insite Inmail allows remote malicious users to inject arbitrary web script or HTML via the acao parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

insite inmail

insite inshop

Exploits

source: wwwsecurityfocuscom/bid/11758/info InMail and InShop are both reported susceptible to cross-site scripting vulnerabilities These issues are due to a failure of the applications to properly sanitize user-supplied input prior to including it in dynamic Web pages These issues could permit a remote attacker to create a malicious UR ...