CVE-2004-1100 - Cross-site scripting (XSS) vulnerability in mailpost.exe in MailPost 5.1.1sv, and possibly earlier v

CVE-2004-1100

Summary

Cross-site scripting (XSS) vulnerability in mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to execute arbitrary web script or HTML via the append parameter. Successful exploitation requires that debug mode is enabled.

References

http://www.kb.cert.org/vuls/id/107998
http://www.procheckup.com/security_info/vuln_pr0410.html
http://www.securityfocus.com/bid/11596
https://exchange.xforce.ibmcloud.com/vulnerabilities/17953

Vulnerable Configurations

cpe:2.3:a:tips:mailpost:5.1.1sv:*:*:*:*:*:*:*
cpe:2.3:a:tips:mailpost:5.1.1sv:*:*:*:*:*:*:*

CVSS

Base:	6.8 (as of 11-07-2017 - 01:30)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:M/Au:N/C:P/I:P/A:P

refmap via4

bid	11596
cert-vn	VU#107998
misc	http://www.procheckup.com/security_info/vuln_pr0410.html
xf	mailpost-append-xss(17953)

Last major update

11-07-2017 - 01:30

Published

10-01-2005 - 05:00

Last modified

11-07-2017 - 01:30