CVE-2005-1488 | BDVDB-2026-10162 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allow remote authenticated users to inject arbitrary web script or HTML via (1) the E-mail address, Note, or Public Certificate fields to address.html, (2) addressaction.html, (3) the Signature field to settings.html, or (4) the Shared calendars to calendarsettings.html.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://marc.info/?l=bugtraq&m=111530933016434&w=2
https://exchange.xforce.ibmcloud.com/vulnerabilities/20467

Exploit#

No public exploit known

History#

Version 12005-05-11Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.