CVE-2004-1130: Cross-site scripting (XSS) vulnerability in admin.asp in CMailServer 5.2 allows remote attackers to execute...

Security readout for executives and security teams

CMailServer 5.2 has a cross-site scripting issue in admin.asp. An attacker could place script or HTML into personal information fields such as username, name, or comments, causing malicious content to run when that data is displayed. The main business concern is compromise of users managing or viewing the WebMail/admin interface. Exposure is most likely in organizations still running CMailServer 5.2 WebMail, especially if admin.asp or user profile management is reachable by untrusted users or the internet. Evidence is limited to CMailServer 5.2 references; do not assume other versions are affected from this bundle alone. Prioritize remediation if CMailServer 5.2 is still operating, especially on internet-facing mail services. Because the product and CVE are very old, replacement or isolation may be more practical than trying to retrofit controls. Mitigation focus: Check vendor or maintainer guidance for fixed versions or retirement recommendations.; Restrict access to CMailServer WebMail and admin.asp to trusted networks.; Upgrade or replace CMailServer 5.2 if it remains in production..

Prepared

Jun 30, 2026, 02:08 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.