CVE-2004-0337 - CVE House
Back to Database
Status published Medium CVE-2004-0337

Cross-site scripting (XSS) vulnerability in LAN SUITE Web Mail 602Pro...

Vulnerability Description

Cross-site scripting (XSS) vulnerability in LAN SUITE Web Mail 602Pro allows remote attackers to execute arbitrary script or HTML as other users via a URL to index.html, followed by a / (slash) and the desired script. NOTE: the vendor states that this bug could not be reproduced, so this issue may be REJECTed in the future.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-0337

Credits & Attribution

No credits recorded in the NVD database.

References

More from software602

View All →
CVE-2007-3203
Stack-based buffer overflow in smtpdll.dll in the SMTP service in...
High 7.5
CVE-2005-1909
The web server control panel in 602LAN SUITE 2004 allows...
Medium 4.3
CVE-2005-1423
Directory traversal vulnerability in the mail program in 602LAN SUITE...
Medium 6.4
CVE-2005-0344
Directory traversal vulnerability in 602LAN SUITE 2004.0.04.1221 allows remote authenticated...
Medium 5
CVE-2004-1502
The Telnet proxy in 602 Lan Suite 2004.0.04.0909 and earlier...
Medium 5

Affected Vendor

software602

View all reports →

Affected Software

602pro lan suite
Vulnerable Versions:
2002, 2003

Timeline

Official Publish: March 18th, 2004
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.