NVD

Id
72925  
Name
CVE-2004-2548  
Description
Multiple cross-site scripting (XSS) vulnerabilities in NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to inject arbitrary web script or HTML via (a) a URI containing the script, or (b) the username field in the login form. NOTE: it is possible that the first attack vector is resultant from the error message issue (CVE-2004-2547).  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-07-18  
Published
2004-12-31  
Modified Date
2017-07-10  
Seq
2004-2548  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
375600 72925 CVE-2004-2548 20040603 Surgemail - Multiple Vulnerabilities  View
375601 72925 CVE-2004-2548 http://www.exploitlabs.com/files/advisories/EXPL-A-2004-002-surgmail.txt  View
375602 72925 CVE-2004-2548 http://www.netwinsite.com/surgemail/help/updates.htm  View
375603 72925 CVE-2004-2548 10483  View
375604 72925 CVE-2004-2548 surgemail-username-xss(16320)  View

Related JVN