CVE-2004-0588

Cross-site scripting (XSS) vulnerability in the web mail module for Usermin 1.070 allows remote attackers to insert arbitrary HTML and script via e-mail messages.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2004-08-06

Last modified

2024-08-08

Affected products

• Usermin (Usermin)

References

• http://marc.info/?l=bugtraq&m=108781564518287&w=2
• http://www.gentoo.org/security/en/glsa/glsa-200406-15.xml
• http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/73_e.html
• http://www.securityfocus.com/bid/10521
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16494