← Database

CVE-2002-1899

MEDIUM CVSS: 4.3 Published: 2002-12-31 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in IceWarp Web Mail 3.3.3 and 3.4.5 allows remote attackers to inject arbitrary web script or HTML via the "Full Name" (addressname) parameter.

Affected Platforms

Icewarp Web Mail

Weakness Type

NVD-CWE-Other

References