CVE-2004-2494

EPSS 1.9%

Cross-site scripting (XSS) vulnerability in _error in Ability Mail Server 1.18 allows remote attackers to inject arbitrary web script or HTML via the erromsg parameter.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/24268unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://members.lycos.co.uk/r34ct/main/Ability_mail_server_1.18.txt http://secunia.com/advisories/12039 http://securitytracker.com/id?1010672 https://exchange.xforce.ibmcloud.com/vulnerabilities/16676 http://www.osvdb.org/7718 http://www.securityfocus.com/bid/10695