medium4.3Public exploit code
CVE-2002-1526
Cross-site scripting (XSS) vulnerability in emumail.cgi for EMU Webmail 5.0 allows remote attackers to inject arbitrary HTML or script via the email address fi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- EmuMail 5.0 Email Form - Script Injection2002-09-29 · webapps · cgi · Verified
Impact
Cross-site scripting (XSS) vulnerability in emumail.cgi for EMU Webmail 5.0 allows remote attackers to inject arbitrary HTML or script via the email address field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emumail | Emu Webmail | Version 5.0 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0131.html
- http://www.iss.net/security_center/static/10205.php
- http://www.securityfocus.com/bid/5824
- http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0131.html
- http://www.iss.net/security_center/static/10205.php
- http://www.securityfocus.com/bid/5824