CVE-2004-0591
EPSS 13.9%courier - cross-site scripting
發布日:2004/8/6修改日:2026/4/28
描述
Cross-site scripting (XSS) vulnerability in the print_header_uc function for SqWebMail 4.0.4 and earlier, and possibly 3.x, allows remote attackers to inject arbitrary web script or HRML via (1) e-mail headers or (2) a message with a "message/delivery-status" MIME Content-Type.
受影響套件(2)
- Debian/courierfrom 0, < 0.45.4-4
- Debian/courierfrom 0, < 0.37.3-2.5