Vulnerability in Mhonarc

CVE-2002-1307

Cross-site scripting vulnerability (XSS) in MHonArc 2.5.12 and earlier allows remote attackers to insert script or HTML via an email message with the script in a MIME header name.

EPSS: 0.040 (89.5th percentile) — read the EPSS interpretation.

Affected products

  • Mhonarc — versions 2.4.4, 2.5.2, 2.5.12
  • N/a — versions n/a

References