Unscored CVE-2004-1669 EUVD-2004-1663GHSA-578c-6gc2-pwhw

Cross-site scripting (XSS) vulnerability in MERAK Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote a…

Published Feb 20, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in MERAK Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to execute arbitrary web script or HTML via the (1) User name parameter to accountsettings.html or (2) Search string parameter to search.html.

References

merak-icewarp-xss(17313) vdb-entry
20040910 Multiple vulnerabilities in Icewarp Web Mail 5.2.7 mailing-list
12789 third-party-advisory
11371 vdb-entry