Vulnerabilities > CVE-2004-2625 - HTML Injection vulnerability in Outblaze Webmail

047910
CVSS 5.1 - MEDIUM
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
high complexity
outblaze
exploit available
NVD
Published: 2004-12-31
Updated: 2017-07-20

Summary

Cross-site scripting (XSS) vulnerability in Outblaze Email allows remote attackers to inject arbitrary web script or HTML via Javascript in an attribute of an IMG tag.

Vulnerable Configurations

Part Description Count
Application
Outblaze
1

Exploit-Db

descriptionOutblaze Webmail 0 HTML Injection Vulnerability. CVE-2004-2625. Webapps exploit for php platform
idEDB-ID:24291
last seen2016-02-02
modified2004-07-19
published2004-07-19
reporterDarkBicho
sourcehttps://www.exploit-db.com/download/24291/
titleOutblaze Webmail - HTML Injection Vulnerability

References