CVE-2002-0738 in MHonArc

Sumário

de MITRE

MHonArc 2.5.2 and earlier does not properly filter Javascript from archived e-mail messages, which could allow remote attackers to execute script in web clients by (1) splitting the SCRIPT tag into smaller pieces, (2) including the script in a SRC argument to an IMG tag, or (3) using "&={script}" syntax.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Divulgação: 12/08/2002
• Moderação: aceite
• Entrada: VDB-18624
• CPE: pronto
• CWE: CWE-80 (confirmado)
• CVSS: 7.5 (NVD)
• EPSS: 0.02515
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-0738
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-0738
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-0738/