Vulnerability Details CVE-2002-1434
Multiple cross-site scripting (XSS) vulnerabilities in the Web mail module of Kerio MailServer 5.0 allow remote attackers to execute HTML script as other users via certain URLs.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 74.1%
CVSS Severity
CVSS v2 Score 6.8
References
- http://archives.neohapsis.com/archives/bugtraq/2002-08/0183.html
- http://www.iss.net/security_center/static/9905.php
- http://www.securityfocus.com/bid/5507
- http://archives.neohapsis.com/archives/bugtraq/2002-08/0183.html
- http://www.iss.net/security_center/static/9905.php
- http://www.securityfocus.com/bid/5507
Products affected by CVE-2002-1434
-
cpe:2.3:a:kerio:kerio_mailserver:5.0
-
cpe:2.3:a:kerio:kerio_mailserver:5.1
-
cpe:2.3:a:kerio:kerio_mailserver:5.1.1