Approved changes feed: RSS · Atom
cpe:2.3:a:tips:mailpost:5.1.1_sv:*:*:*:*:*:*:*part: a version: 5.1.1_sv update: *
| Vendor | Tips (5f1700c8-86ae-5941-851b-eb8b306dbacd) |
|---|---|
| Product | Mailpost (8b92faf0-dff5-5133-8d32-e5251a4b25fd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2004-1103 |
vulnerable | 2026-06-08 04:47:52.962768 |
Details available
MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to gain sensitive information via the debug parameter, which reveals information such as the path to the web root and the web server version.
Published: 2004-12-01T05:00:00.000Z
Updated: 2024-08-08T00:39:00.902Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1102 |
vulnerable | 2026-06-08 04:47:52.962462 |
Details available
MailPost 5.1.1sv, and possibly earlier versions, displays a different error message depending on whether the requested file exists or not, which allows remote attackers to gain sensitive information.
Published: 2004-12-01T05:00:00.000Z
Updated: 2024-08-08T00:39:00.701Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1101 |
vulnerable | 2026-06-08 04:47:52.962058 |
Details available
mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash), leak sensitive pathname information in the resulting error message, and execute a cross-site scripting (XSS) attack via an HTTP request that contains a / (backslash) and arbitrary webscript before the requested file, which leaks the pathname and does not quote the script in the resulting Visual Basic error message.
Published: 2004-12-01T05:00:00.000Z
Updated: 2024-08-08T00:39:00.746Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.