Back
CVE-2004-1196
Cross-site scripting (XSS) vulnerability in inmail.pl in Insite Inmail allows remote attackers to inject arbitrary web script or HTML via the acao parameter.
Published: Jan 10, 2005
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (2)
| Vendor | Product | Version |
|---|---|---|
| insite | inmail | * |
| insite | inshop | * |
GitHub Security Advisory GHSA-xrc8-w329-p3jw
Cross-site scripting (XSS) vulnerability in inmail.pl in Insite Inmail allows remote attackers to...
References (8)
- http://marc.info/?l=bugtraq&m=110140029419018&w=2
- http://secunia.com/advisories/13188/ Vendor Advisory
- http://www.securityfocus.com/bid/11758 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18268
- http://marc.info/?l=bugtraq&m=110140029419018&w=2
- http://secunia.com/advisories/13188/ Vendor Advisory
- http://www.securityfocus.com/bid/11758 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18268
Risk Scores
CVSS Score
6.8 / 10
EPSS Score
4.27%
Top 10% most likely to be exploited
Threat Score
28.5 / 100
Data Sources
NVD
EPSS
GitHub