← back
CVE-2004-2334

CVE-2004-2334

EPSS 4.8%
Multiple cross-site scripting (XSS) vulnerabilities in EMU Webmail 5.2.7 allow remote attackers to inject arbitrary web script or HTML via (1) a hex-encoded value to the variable parameter in emumail.fcgi, (2) the folder parameter in emumail.fcgi, or Javascript in the (3) username or (4) password field in the login page.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/23810unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://members.lycos.co.uk/r34ct/main/emu/emu.txthttp://secunia.com/advisories/11110http://securitytracker.com/id?1009397https://exchange.xforce.ibmcloud.com/vulnerabilities/15451https://exchange.xforce.ibmcloud.com/vulnerabilities/15452http://www.osvdb.org/4204http://www.osvdb.org/4972http://www.securityfocus.com/bid/9861http://www.zone-h.com/advisories/read/id=4141