Published: 31/12/2004 Updated: 11/07/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in EMU Webmail 5.2.7 allow remote malicious users to inject arbitrary web script or HTML via (1) a hex-encoded value to the variable parameter in emumail.fcgi, (2) the folder parameter in emumail.fcgi, or Javascript in the (3) username or (4) password field in the login page.

Vulnerable Product	Search on Vulmon	Subscribe to Product
emumail emu webmail 5.2.7

source: wwwsecurityfocuscom/bid/9861/info Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out cross-site scripting attacks and disclose the path to the victim's home directory The issues are reported to exist in the login script, 'emumailfcgi' script and the 'initemu' sample script ...

NVD-CWE-Other http://members.lycos.co.uk/r34ct/main/emu/emu.txt http://www.zone-h.com/advisories/read/id=4141 http://www.securityfocus.com/bid/9861 http://www.osvdb.org/4204 http://www.osvdb.org/4972 http://securitytracker.com/id?1009397 http://secunia.com/advisories/11110 https://exchange.xforce.ibmcloud.com/vulnerabilities/15452 https://exchange.xforce.ibmcloud.com/vulnerabilities/15451 https://nvd.nist.gov https://www.exploit-db.com/exploits/23810/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2004-2334

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect