Security Advisory

CVE-2004-2548

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2005-11-21 11:00:00

Last updated 2024-08-08 01:29:14

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to inject arbitrary web script or HTML via (a) a URI containing the script, or (b) the username field in the login form. NOTE: it is possible that the first attack vector is resultant from the error message issue (CVE-2004-2547).

← Browse all CVEs View on cve.org ↗