CVE-2004-1669 | BDVDB-2026-8473 Detail

Description#

Cross-site scripting (XSS) vulnerability in MERAK Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to execute arbitrary web script or HTML via the (1) User name parameter to accountsettings.html or (2) Search string parameter to search.html.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/17313
http://marc.info/?l=bugtraq&m=109483971420067&w=2
http://secunia.com/advisories/12789
http://www.securityfocus.com/bid/11371

Exploit#

No public exploit known

History#

Version 12005-02-20Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.