CVE-2004-2447

N/A Unknown

Published: December 31, 2004 Modified: April 16, 2026

Description

Cross-site scripting (XSS) vulnerability in 1st Class Mail Server 4.01 allows remote attackers to inject arbitrary web script or HTML via the Mailbox parameter to (1) viewmail.tagz, (2) the index script under /user/, (3) members.tagz, (4) general.tagz, (5) advanced.tagz, or (6) list.tagz.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://secunia.com/advisories/11330

Source: cve@mitre.org

Exploit Vendor Advisory

http://securitytracker.com/alerts/2004/Apr/1009705.html

Source: cve@mitre.org

Exploit Vendor Advisory

http://www.osvdb.org/5012

Source: cve@mitre.org

Exploit

http://www.osvdb.org/5013

Source: cve@mitre.org

Exploit

http://www.osvdb.org/5014

Source: cve@mitre.org

Exploit

http://www.osvdb.org/5015

Source: cve@mitre.org

Exploit

http://www.osvdb.org/5016

Source: cve@mitre.org

Exploit

http://www.osvdb.org/5017

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/10089

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/15815

Source: cve@mitre.org

http://secunia.com/advisories/11330