Unscored severity · published Sep 11, 2008
CVE-2008-4045
Multiple cross-site scripting (XSS) vulnerabilities in @Mail 5.42 allow remote attackers to inject arbitrary web script or HTML via the (1) file and (2) HelpFile parameters to…
–
CVSS
1%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in @Mail 5.42 allow remote attackers to inject arbitrary web script or HTML via the (1) file and (2) HelpFile parameters to parse.php, the (3) Folder and (4) start parameters to showmail.php, and the (5) abookview parameter to abook.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
@mail · @mail
5.42 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-4045
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-4045
packetstorm.linuxsecurity.com
http://packetstorm.linuxsecurity.com/0808-exploits/atmail542-xss.txt
secunia.com
http://secunia.com/advisories/31720
secunia.com
http://secunia.com/advisories/31727
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/44860