Detections
Analytics
ArGoSoft Mail Server Unspecified XSS
medium Nessus Plugin ID 16012
Language:
Synopsis
The remote host is running a mail server that is affected by an HTML injection vulnerability.Description
The remote host is running the ArGoSoft WebMail interface.There is a flaw in this interface that could allow an attacker to conduct cross-site scripting (XSS) attacks against users.
No further details have been provided.
*** Nessus solely relied on the banner of this service to issue
*** this alert.
Solution
Upgrade to ArGoSoft 1.8.7.0 or newer.See Also
Plugin Details
Severity: Medium
ID: 16012
File Name: argosoft_multiple_flaws2.nasl
Version: 1.22
Type: remote
Family: CGI abuses : XSS
Published: 12/20/2004
Updated: 1/19/2021
Supported Sensors: Nessus
Risk Information
CVSS v2
Risk Factor: Medium
Base Score: 5.8
Temporal Score: 5
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:N
Vulnerability Information
Exploit Available: true
Exploit Ease: No exploit is required
Patch Publication Date: 12/17/2004
Vulnerability Publication Date: 12/17/2004
Reference Information
BID: 12044