First published: Tue Dec 31 2002(Updated: )
Cross-site scripting vulnerability (XSS) in BasiliX Webmail 1.10 allows remote attackers to execute arbitrary script as other users by injecting script into the (1) subject or (2) message fields.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Jason Flatt Basic Webmail | =1.1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-1708 is considered a moderate severity cross-site scripting vulnerability.
To fix CVE-2002-1708, update to a patched version of Basilix Webmail that addresses the XSS vulnerability.
CVE-2002-1708 affects Basilix Webmail version 1.1.0.
Exploiting CVE-2002-1708 allows attackers to execute arbitrary scripts in the context of other users.
Yes, CVE-2002-1708 can be exploited remotely by injecting scripts into the subject or message fields.