CVE-2002-0738
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
12/08/2002
Last modified:
05/09/2008
Description
MHonArc 2.5.2 and earlier does not properly filter Javascript from archived e-mail messages, which could allow remote attackers to execute script in web clients by (1) splitting the SCRIPT tag into smaller pieces, (2) including the script in a SRC argument to an IMG tag, or (3) using "&={script}" syntax.
Impact
Base Score 2.0
7.50
Severity 2.0
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:mhonarc:mhonarc:2.5:*:*:*:*:*:*:* | ||
cpe:2.3:a:mhonarc:mhonarc:2.5.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:mhonarc:mhonarc:2.5.2:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page