CVE-2004-2379

Published: Dec 31, 2004Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in @Mail 3.64 for Windows allow remote attackers to inject arbitrary web script or HTML via (1) the Displayed Name attribute in util.pl and (2) the Folder attribute in showmail.pl.

Affected (1)

Products: Calacode: At Mail Webmail System

Calacode

1 product

At Mail Webmail System

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Calacode At Mail Webmail System	Version 3.64

References (14)

http://members.lycos.co.uk/r34ct/main/%40mail_3.64/%40mail_3.64.txt

Source: cve@mitre.org

http://secunia.com/advisories/10978

Source: cve@mitre.org

http://www.osvdb.org/4066

Source: cve@mitre.org

http://www.osvdb.org/4067

Source: cve@mitre.org

http://www.securityfocus.com/bid/9748

Source: cve@mitre.org

http://www.securitytracker.com/alerts/2004/Feb/1009208.html

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/15324

Source: cve@mitre.org

http://members.lycos.co.uk/r34ct/main/%40mail_3.64/%40mail_3.64.txt