VulnerabilityModified
CVE-2004-2447
Cross-site scripting (XSS) vulnerability in 1st Class Mail Server 4.01 allows remote attackers to inject arbitrary web script or HTML via the Mailbox parameter to (1) viewmail.tagz, (2) the index script under /user/, (3) members.tagz, (4) general.tagz,…
MEDIUM 4.3EPSS 2.67%
Does this matter?
Lower severity and a low EPSS score (2.67%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting (XSS) vulnerability in 1st Class Mail Server 4.01 allows remote attackers to inject arbitrary web script or HTML via the Mailbox parameter to (1) viewmail.tagz, (2) the index script under /user/, (3) members.tagz, (4) general.tagz, (5) advanced.tagz, or (6) list.tagz.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 2.67% probability · 85th percentile
- CISA KEV
- Not listed
- Affected
- 1st class internet solutions/1st class mail server
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/11330Exploit, Vendor Advisory
- http://securitytracker.com/alerts/2004/Apr/1009705.htmlExploit, Vendor Advisory
- http://www.osvdb.org/5012Exploit
- http://www.osvdb.org/5013Exploit
- http://www.osvdb.org/5014Exploit
- http://www.osvdb.org/5015Exploit
- http://www.osvdb.org/5016Exploit
- http://www.osvdb.org/5017Exploit
- http://www.securityfocus.com/bid/10089Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15815
- http://secunia.com/advisories/11330Exploit, Vendor Advisory
- http://securitytracker.com/alerts/2004/Apr/1009705.htmlExploit, Vendor Advisory
- http://www.osvdb.org/5012Exploit
- http://www.osvdb.org/5013Exploit
- http://www.osvdb.org/5014Exploit
- http://www.osvdb.org/5015Exploit
- http://www.osvdb.org/5016Exploit
- http://www.osvdb.org/5017Exploit
- http://www.securityfocus.com/bid/10089Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15815
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.