Description (CNA)
Stored cross-site scripting vulnerability exists in CGIs included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| A.K.I Software / pmc.exe | affected 2.5.1.720 and earlier |
| A.K.I Software / pmam.exe | affected 2.5.1.1411 and earlier |
| A.K.I Software / pmum.exe (Standard edition) | affected 2.5.1.25451 and earlier |
| A.K.I Software / pmum.exe (Pro edition) | affected 2.5.1.25452 and earlier |
| A.K.I Software / pmum.exe (Standard + IMAP4 edition) | affected 2.5.1.25453 and earlier |
| A.K.I Software / pmum.exe (Pro + IMAP4 edition / Enterprise edition) | affected 2.5.1.25454 and earlier |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.