CVE-2004-1719: XSS
Multiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) category, (2) cserver, (3) ext, (4) global, (5) showgroups, (6) or showlite parameters to address.html, or the (7) spage or (8) autoresponder parameters to settings.html, the (9) folder parameter to readmail.html, or the (10) attachmentpagetexterror parameter to attachment.html, (11) folder, (12) ct, or (13) cv parameters to calendar.html, (14) an <img> tag, or (15) the subject of an e-mail message.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1719?
CVE-2004-1719 is classified as a medium severity vulnerability due to its risk of cross-site scripting attacks.
How do I fix CVE-2004-1719?
To fix CVE-2004-1719, you should upgrade to the latest version of Merak Mail Server that addresses these XSS vulnerabilities.
What are the vulnerabilities in CVE-2004-1719?
CVE-2004-1719 includes multiple cross-site scripting vulnerabilities in the Merak Webmail Server, allowing attackers to inject arbitrary scripts.
Who is affected by CVE-2004-1719?
CVE-2004-1719 affects users of Merak Webmail Server version 5.2.7 and potentially earlier versions.
Can CVE-2004-1719 lead to data compromise?
Yes, successful exploitation of CVE-2004-1719 can lead to unauthorized access to user data and session hijacking.