Unscored CVE-2002-1899 EUVD-2002-1878GHSA-m2wq-7cw6-4r7f

Cross-site scripting (XSS) vulnerability in IceWarp Web Mail 3.3.3 and 3.4.5 allows remote attackers to inject arbitrary web script or HTML…

Published Jun 28, 2005 · Updated Sep 17, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in IceWarp Web Mail 3.3.3 and 3.4.5 allows remote attackers to inject arbitrary web script or HTML via the "Full Name" (addressname) parameter.

References

icewarp-name-xss(9866) vdb-entry
http://www.icewarp.com/Products/IceWarp_Web_Mail/releasenotes.txt
20021112 IceWarp 3.4.5 XSS *AGAIN* mailing-list
20020814 IceWarp Webmail XSS mailing-list