Back
CVE-2002-1307
Cross-site scripting vulnerability (XSS) in MHonArc 2.5.12 and earlier allows remote attackers to insert script or HTML via an email message with the script in a MIME header name.
Published: Nov 29, 2002
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (3)
| Vendor | Product | Version |
|---|---|---|
| mhonarc | mhonarc | 2.4.4 |
| mhonarc | mhonarc | 2.5.2 |
| mhonarc | mhonarc | 2.5.12 |
GitHub Security Advisory GHSA-4ghg-jxgx-f5gm
Cross-site scripting vulnerability (XSS) in MHonArc 2.5.12 and earlier allows remote attackers to...
References (10)
- http://www.debian.org/security/2002/dsa-199 Patch, Vendor Advisory
- http://www.mhonarc.org/archive/cgi-bin/mesg.cgi?a=mhonarc-users&i=200210211713.g9LHDXE02256%40mcguire.earlhood.com
- http://www.osvdb.org/7353
- http://www.securityfocus.com/bid/6204
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10666
- http://www.debian.org/security/2002/dsa-199 Patch, Vendor Advisory
- http://www.mhonarc.org/archive/cgi-bin/mesg.cgi?a=mhonarc-users&i=200210211713.g9LHDXE02256%40mcguire.earlhood.com
- http://www.osvdb.org/7353
- http://www.securityfocus.com/bid/6204
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10666
Risk Scores
CVSS Score
6.8 / 10
EPSS Score
4.02%
Top 10% most likely to be exploited
Threat Score
28.4 / 100
Data Sources
NVD
EPSS
GitHub