Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2002-0950

EPSS 2.56% · P86
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2002-0950

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Cross-site scripting vulnerability in TransWARE Active! mail 1.422 and 2.0 allows remote attackers to execute arbitrary code via a certain e-mail header, which is not properly filtered.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Active! mail跨站脚本执行漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Active! mail是一款由TransWARE Co.开发的基于WEB的EMAIL系统。 Active! mail对邮件头字段数据缺少正确充分的检查，远程攻击者可以利用此漏洞进行跨站脚本执行攻击。 当邮件头字段中包含HTML标记时Active! mail没有对数据进行正确的转换就显示信息，攻击者可以在邮件头字段中插入恶意HTML标记如<script>发送给用户，当用户查看邮件时就导致恶意脚本代码在用户端浏览器上执行，导致用户基于认证的Cookie信息泄露或进行其他非法活动。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2002-0950

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2002-0950

请登录查看更多情报信息。

Same Patch Batch · n/a · 2002-08-31 · 162 CVEs total

CVE-2002-1019Adobe Content Server library eBook检验漏洞
CVE-2002-1005ArGoSoft Mail Server Pro 1.8.1.7远程拒绝服务漏洞
CVE-2002-1007Blackboard跨站脚本漏洞
CVE-2002-1008Summit Computer Networks Lil' HTTP Server URLCount.CGI HTML注入漏洞
CVE-2002-1009Summit Computer Networks Lil' HTTP Server pbcgi.cgi跨站脚本攻击（XSS）漏洞
CVE-2002-1010Lotus Domino绕过web根中的访问限制漏洞
CVE-2002-1011IBM Tivoli Management Framework Endpoint缓冲区溢出漏洞
CVE-2002-1012IBM Tivoli Management Framework 管理节点机WEB服务远程缓冲区溢出漏洞
CVE-2002-1016Adobe eBook Reader文件保护限制可突破漏洞
CVE-2002-1017Adobe eBook Reader文件传送授权凭证弱算法漏洞
CVE-2002-1018Adobe Content Server library拒绝服务漏洞
CVE-2002-1026Macromedia Sitespring数据库引擎远程拒绝服务攻击漏洞
CVE-2002-1032KeyFocus (KF) web server拒绝服务漏洞
CVE-2002-1029WorldSpan Res Manager畸形TCP数据包服务拒绝漏洞
CVE-2002-1028Oddsock Song Requester WinAmp Plugin服务拒绝漏洞
CVE-2002-1027Macromedia Sitespring默认出错页面跨站脚本漏洞
CVE-2002-1022Working Resources BadBlue明文密码本地存储漏洞
CVE-2002-1020Adobe Content Server library eBook检验漏洞
CVE-2002-1021Working Resources BadBlue NULL字节远程文件泄露漏洞
CVE-2002-1003MyWebServer GET请求远程缓冲区溢出漏洞

Showing top 20 of 162 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2002-0950

No comments yet

Leave a comment