medium6.8Public exploit code
CVE-2002-1708
Cross-site scripting vulnerability (XSS) in BasiliX Webmail 1.10 allows remote attackers to execute arbitrary script as other users by injecting script into th…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BasiliX Webmail 1.1 - Message Content Script Injection2002-06-19 · webapps · php · Verified
Impact
Cross-site scripting vulnerability (XSS) in BasiliX Webmail 1.10 allows remote attackers to execute arbitrary script as other users by injecting script into the (1) subject or (2) message fields.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Basilix | Basilix Webmail | Version 1.1.0 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0117.html
- http://online.securityfocus.com/archive/1/277710
- http://www.securityfocus.com/bid/5060
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9384
- http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0117.html
- http://online.securityfocus.com/archive/1/277710
- http://www.securityfocus.com/bid/5060
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9384