CVE-2005-0386

Cross-site scripting (XSS) vulnerability in network.cgi in mailreader before 2.3.29 earlier allows remote attackers to inject arbitrary web script or HTML via MIME text/enriched or text/richtext messages.

Published: May 2, 2005
Updated: Apr 13, 2023
CVE: CVE-2005-0386
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
mailreader.com / mailreader.com	2.3.29	2.3.29.x
mailreader.com / mailreader.com	2.3.20	2.3.20.x
mailreader.com / mailreader.com	2.3.21	2.3.21.x
mailreader.com / mailreader.com	2.3.25	2.3.25.x
mailreader.com / mailreader.com	2.3.22	2.3.22.x
mailreader.com / mailreader.com	2.3.24	2.3.24.x
mailreader.com / mailreader.com	2.3.23	2.3.23.x
mailreader.com / mailreader.com	2.3.28	2.3.28.x
mailreader.com / mailreader.com	2.3.26	2.3.26.x
mailreader.com / mailreader.com	2.3.27	2.3.27.x

http://secunia.com/advisories/14777
http://www.debian.org/security/2005/dsa-700

Vulnerability Database

289,784

CVE-2005-0386