Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2002-1708: BasiliX Webmail lets attackers run scripts in messages

CVE-2002-1708 · published 23 years ago

Summary

BasiliX Webmail version 1.10 can be tricked into running code that an attacker inserts into the subject line or the body of an email. This could let the attacker perform actions on behalf of other users who view the crafted email. Update to a patched version or apply the vendor’s recommended fix as soon as possible.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
basilix	basilix_webmail	1.1.0 `cpe:2.3:a:basilix:basilix_webmail:1.1.0:::::::*`

Original advisory text

Cross-site scripting vulnerability (XSS) in BasiliX Webmail 1.10 allows remote attackers to execute arbitrary script as other users by injecting script into the (1) subject or (2) message fields.

References

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

6.8 Medium

Exploitation

4% chance of attack within 30 days

Timeline

Published31 Dec 2002

Updated25 Oct 2026

First seen29 Sep 2026

Sources

CVE-2002-1708 · NVD

Track software like this

Free during beta