GCVE - cpe:2.3:a:netwin:surgemail:1.8f:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:netwin:surgemail:1.8f:*:*:*:*:*:*:*

part: a version: 1.8f update: *

Vendor	Netwin (`84440f9c-0c8f-54f6-a00b-4d1ca5722029`)
Product	Surgemail (`e002b59c-cf4b-5828-aa83-0fdab9b59443`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-3201`	vulnerable	2026-06-08 04:55:13.661439	Details available Cross-site scripting (XSS) vulnerability in NetWin Surgemail before 4.3g allows remote attackers to inject arbitrary web script or HTML via the username_ex parameter to the surgeweb program. Published: 2011-01-07T22:00:00.000Z Updated: 2024-08-07T03:03:18.689Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/34797/ http://www.securityfocus.com/archive/1/514115/100/0/threaded http://ictsec.se/?p=108 http://www.securityfocus.com/bid/43679 http://secunia.com/advisories/41685	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-2548`	vulnerable	2026-06-08 04:48:10.141457	Details available Multiple cross-site scripting (XSS) vulnerabilities in NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to inject arbitrary web script or HTML via (a) a URI containing the script, or (b) the username field in the login form. NOTE: it is possible that the first attack vector is resultant from the error message issue (CVE-2004-2547). Published: 2005-11-21T11:00:00.000Z Updated: 2024-08-08T01:29:14.076Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/10483 https://exchange.xforce.ibmcloud.com/vulnerabilities/16320 http://www.exploitlabs.com/files/advisories/EXPL-A-2004-002-surgmail.txt http://www.osvdb.org/6746 http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0056.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-2537`	vulnerable	2026-06-08 04:48:10.035690	Details available Unspecified vulnerability in SurgeMail before 2.2c10 has unknown impact and attack vectors, related to a "Webmail security bug." Published: 2005-10-25T04:00:00.000Z Updated: 2024-08-08T01:29:13.742Z Open on db.gcve.eu Reference links http://www.osvdb.org/12559 http://www.securityfocus.com/bid/12086 https://exchange.xforce.ibmcloud.com/vulnerabilities/18648 http://secunia.com/advisories/13621 http://netwinsite.com/surgemail/help/updates.htm	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.