Approved changes feed: RSS · Atom

cpe:2.3:a:atmail:atmail_open:1.04:*:open-source:*:*:*:*:*

part: a version: 1.04 update: *

VendorAtmail (f3faa2b7-dbb1-5d22-a5dd-fec1b3085bc2)
ProductAtmail Open (d49e3570-ab32-53e9-84e1-2af07aac01bf)
Editionopen-source
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/bigbluehat/atmailopen purl2cpe 2026-06-01 10:13:20.578855
pkg:sourceforge/atmailopen purl2cpe 2026-06-01 10:13:20.578858

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-4540 vulnerable 2026-06-08 04:59:31.794131 Details available
Multiple cross-site scripting (XSS) vulnerabilities in AtMail Open (aka AtMail Open-Source edition) 1.04 allow remote attackers to inject arbitrary web script or HTML via the func parameter to (1) ldap.php or (2) search.php.
Published: 2011-12-01T21:00:00.000Z
Updated: 2024-08-07T00:09:18.734Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.