Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2004-2548

EPSS 12.82% · P94
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2004-2548

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to inject arbitrary web script or HTML via (a) a URI containing the script, or (b) the username field in the login form. NOTE: it is possible that the first attack vector is resultant from the error message issue (CVE-2004-2547).
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
NetWin SurgeMail/WebMail多个输入验证漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
NetWin SurgeMail/WebMail是基于WEB的邮件服务程序。 NetWin SurgeMail/WebMail多处不正确处理用户提供数据，远程攻击者可以利用这个漏洞获得敏感路径信息和进行跨站脚本攻击。 提交不存在的文件请求会导致敏感信息泄露，而对程序监听的7080端口，对恶意HTML字符缺少充分过滤，可导致跨站脚本攻击，泄露敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2004-2548

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2004-2548

Please Login to view more intelligence information

Same Patch Batch · n/a · 2005-11-21 · 37 CVEs total

CVE-2005-3723Hitachi IP5000 VOIP WIFI电话不能禁用SNMP和TCP3390漏洞
CVE-2005-3715Senao SI-680H VOIP WIFI电话VxWorks远程调试器访问漏洞
CVE-2005-3716UTStarcom F1000 VOIP WIFI电话SNMP守护进程信息泄露漏洞
CVE-2005-3717UTStarcom F1000 VOIP WIFI电话telnet默认用户名密码漏洞
CVE-2005-3718UTStarcom F1000 VOIP WIFI电话可利用其它漏洞攻击漏洞
CVE-2005-3719Hitachi IP5000 VOIP WIFI 电话硬编码的管理员密码漏洞
CVE-2005-3720Hitachi IP5000 VOIP WIFI 电话敏感信息泄露漏洞
CVE-2005-3721Hitachi IP5000 VOIP WIFI电话敏感配置页面不需要认证漏洞
CVE-2005-3722Hitachi IP5000 VOIP WIFI 电话SNMP 守护程序权限提升漏洞
CVE-2005-3699Opera Web Browser可信站点链接图像欺骗状态栏URL漏洞
CVE-2005-3724Zyxel P2000W VOIP WIFI电话信息泄露漏洞
CVE-2005-3725Zyxel P2000W VOIP WIFI电话拒绝服务与信息泄露漏洞
CVE-2005-3726Interspire ArticleLive NX搜索模块SQL注入漏洞
CVE-2005-3727Revize CMS query_results.jsp远程SQL注入漏洞
CVE-2005-3728Idetix Software Systems Revize CMS配置信息泄露漏洞
CVE-2005-3729Idetix Software Systems Revize CMS信息泄露漏洞
CVE-2005-3730Revize CMS HTTPTranslatorServlet多个跨站脚本漏洞
CVE-2005-3731yaSSL未明漏洞
CVE-2004-2552Xboard缓冲区溢出漏洞
CVE-2005-3733Juniper路由器ISAKMP IKE通讯多个安全漏洞

Showing top 20 of 37 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2004-2548

No comments yet

Leave a comment