Approved changes feed: RSS · Atom

cpe:2.3:a:aeromail:aeromail:1.30:*:*:*:*:*:*:*

part: a version: 1.30 update: *

VendorAeromail (f0de46e0-59d8-56bb-9162-d41023f2b3d7)
ProductAeromail (6d1eeebe-05b6-5983-b19a-d3f20c2e4c81)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2002-0411 vulnerable 2026-06-08 04:46:21.375939 Details available
Cross-site scripting vulnerability in message.php for AeroMail before 1.45 allows remote attackers to execute Javascript as an AeroMail user via an email message with the script in the Subject line.
Published: 2002-06-11T04:00:00.000Z
Updated: 2024-08-08T02:49:27.474Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0410 vulnerable 2026-06-08 04:46:21.374939 Details available
send_message.php in AeroMail before 1.45 allows remote attackers to read arbitrary files on the server, instead of just uploaded files, via an attachment that modifies the filename to be uploaded.
Published: 2002-06-11T04:00:00.000Z
Updated: 2024-08-08T02:49:27.499Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.