20020514 NOCC: cross-site-scripting bugmailing list
http://archives.neohapsis.com/archives/bugtraq/2002-05/0107.html CVE-2002-2343
NOCC 0.9.x - Webmail Script Injection
Record summary
CVE-2002-2343 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Cross-site scripting (XSS) vulnerability in NOCC 0.9 through 0.9.5 allows remote attackers to inject arbitrary web script or HTML via email messages.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBNOCC 0.9.x - Webmail Script InjectionExploitDB exploitby ppp-designNot analyzed1 file
References
5sourceforge.netConfirmation
http://sourceforge.net/tracker/index.php?func=detail&aid=555897&group_id=12177&atid=112177 nocc-webmail-css(9071)vdb entry
http://www.iss.net/security_center/static/9071.php 4740vdb entry
http://www.securityfocus.com/bid/4740 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2002-2343