CVE-2011-4541

Published: Nov 29, 2011Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in index.php in Hastymail2 2.1.1 before RC2 allows remote attackers to inject arbitrary web script or HTML via the rs parameter in a mailbox Drafts action.

Affected (29)

Products: Hastymail: Hastymail2

Hastymail

1 product

Hastymail2

Configuration A

29 vulnerable

Vulnerable Software	Affected Versions
Hastymail Hastymail2	All versions
Hastymail Hastymail2	All versions
Hastymail Hastymail2	All versions
Hastymail Hastymail2	All versions
Hastymail Hastymail2	Up to 2.1.1
Hastymail Hastymail2	All versions
Hastymail Hastymail2	All versions
Hastymail Hastymail2	All versions
Hastymail Hastymail2	All versions
Hastymail Hastymail2	All versions
Hastymail Hastymail2	All versions
Hastymail Hastymail2	All versions
Hastymail Hastymail2	All versions
Hastymail Hastymail2	Version 1.01
Hastymail Hastymail2	Version 1.0
Hastymail Hastymail2	Version 1.1 rc1
Hastymail Hastymail2	Version 1.1 rc2
Hastymail Hastymail2	Version 2.0.1
Hastymail Hastymail2	Version 2.0.2
Hastymail Hastymail2	Version 2.0.3
Hastymail Hastymail2	Version 2.0.4
Hastymail Hastymail2	Version 2.0.5
Hastymail Hastymail2	Version 2.0
Hastymail Hastymail2	Version 2.0 a1
Hastymail Hastymail2	Version 2.0 a2
Hastymail Hastymail2	Version 2.0 b1
Hastymail Hastymail2	Version 2.0 b2
Hastymail Hastymail2	Version 2.0 b3
Hastymail Hastymail2	Version 2.0 rc1