Skip to content
Noroxi

emumail records

6 published records for vendor emumail.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

      The weakness classes this vendor ships most often: where to look.

      CWE

      Attack profile

      All records

      6 records
      • CVE-2002-0532
        28Monitor

        EMU Webmail allows local users to execute arbitrary programs via a ..

        HighCVSS 7.2No exploitEPSS 0%

        emumail · emumailAug 12, 2002

      • CVE-2002-1527
        22Monitor

        emumail.cgi in EMU Webmail 5.0 allows remote attackers to determine the full pathname for emumail.cgi via a malformed string containing scri

        MediumCVSS 5.0Proof of conceptEPSS 7%

        emumail · emu webmailApr 2, 2003

      • CVE-2004-2385
        22Monitor

        EMU Webmail 5.2.7 allows remote attackers to obtain sensitive path information (home directory) via an HTTP request for init.emu.

        MediumCVSS 5.0Proof of conceptEPSS 6%

        emumail · emu webmailDec 31, 2004

      • CVE-2002-0531
        21Monitor

        Directory traversal vulnerability in emumail.cgi in EMU Webmail 4.5.x and 5.1.0 allows remote attackers to read arbitrary files or list arbi

        MediumCVSS 5.0No exploitEPSS 4%

        emumail · emumailAug 12, 2002

      • CVE-2004-2334
        18Monitor

        Multiple cross-site scripting (XSS) vulnerabilities in EMU Webmail 5.2.7 allow remote attackers to inject arbitrary web script or HTML via (

        MediumCVSS 4.3Proof of conceptEPSS 4%

        emumail · emu webmailDec 31, 2004

      • CVE-2002-1526
        18Monitor

        Cross-site scripting (XSS) vulnerability in emumail.cgi for EMU Webmail 5.0 allows remote attackers to inject arbitrary HTML or script via t

        MediumCVSS 4.3Proof of conceptEPSS 3%

        emumail · emu webmailApr 2, 2003