VU#107998Third-party advisory
http://www.kb.cert.org/vuls/id/107998 CVE-2004-1100
TIPS MailPost 5.1.1 - 'APPEND' Cross-Site Scripting
Record summary
CVE-2004-1100 has a selected CVSS score of 6.8; EIP currently links 1 catalogued exploit.
Description
Cross-site scripting (XSS) vulnerability in mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to execute arbitrary web script or HTML via the append parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBTIPS MailPost 5.1.1 - 'APPEND' Cross-Site ScriptingExploitDB exploitby ProcheckupNot analyzed1 file
References
5procheckup.com
http://www.procheckup.com/security_info/vuln_pr0410.html 11596vdb entry
http://www.securityfocus.com/bid/11596 mailpost-append-xss(17953)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/17953 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2004-1100