CVE-2004-2585

Published: Dec 31, 2004Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in frmCompose.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to inject arbitrary web script or HTML via Javascript to the "check spelling" feature in the compose area.

Affected (2)

Products: Smartertools: Smartermail

Smartertools

1 product

Smartermail

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Smartertools Smartermail	Version 1.6.1511
Smartertools Smartermail	Version 1.6.1529

References (14)

http://members.lycos.co.uk/r34ct/main/smarter_mail%203.1/smarter_mail.txt

Source: cve@mitre.org

http://secunia.com/advisories/11042

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1009307

Source: cve@mitre.org

http://www.osvdb.org/4145

Source: cve@mitre.org

http://www.securityfocus.com/bid/9805

Source: cve@mitre.org

http://www.zone-h.org/advisories/read/id=4098

Source: cve@mitre.org

ExploitVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/15393

Source: cve@mitre.org

http://members.lycos.co.uk/r34ct/main/smarter_mail%203.1/smarter_mail.txt