Summary
The target is running at least one instance of Merak Webmail / IceWarp Web Mail 5.2.7 or less or Merak Mail Server 7.5.2 or less - <http://www.MerakMailServer.com/>. This product is subject to multiple XSS, HTML and SQL injection, and PHP source code disclosure vulnerabilities.
Solution
Upgrade to Merak Webmail / IceWarp Web Mail 5.2.8 or Merak Mail Server 7.5.2 or later.
Severity
Classification
-
CVE CVE-2004-1719, CVE-2004-1720, CVE-2004-1721, CVE-2004-1722 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities