Approved changes feed: RSS · Atom

cpe:2.3:a:youngzsoft:cmailserver:5.2.0:*:*:*:*:*:*:*

part: a version: 5.2.0 update: *

VendorYoungzsoft (28c7858b-8f1e-56a1-9357-46cb1236eef6)
ProductCmailserver (d90830ed-6216-53b9-beed-644efe46df87)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2004-1130 vulnerable 2026-06-08 04:47:53.026073 Details available
Cross-site scripting (XSS) vulnerability in admin.asp in CMailServer 5.2 allows remote attackers to execute arbitrary web script or HTML via personal information fields, such as (1) username, (2) name, or (3) comments.
Published: 2004-12-05T05:00:00.000Z
Updated: 2024-08-08T00:39:00.898Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1129 vulnerable 2026-06-08 04:47:53.025796 Details available
SQL injection vulnerability in (1) fdelmail.asp, (2) addressc.asp, and possibly (3) postmail.asp and (4) fmvmail.asp in CMailServer 5.2 allow remote attackers to inject arbitrary SQL commands and delete mail metadata or e-mail addresses of contacts via the indexOfMail parameter.
Published: 2004-12-05T05:00:00.000Z
Updated: 2024-08-08T00:39:00.864Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1128 not_vulnerable 2026-06-08 04:47:53.025429 Details available
Buffer overflow in CMailCOM.dll in CMailServer 5.2 allows remote attackers to execute arbitrary code via an attachment with a long filename.
Published: 2004-12-05T05:00:00.000Z
Updated: 2024-08-08T00:39:00.863Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.