CVE-2023-39223: Stored cross-site scripting vulnerability exists in CGIs included in A.K.I

Stored cross-site scripting vulnerability exists in CGIs included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, an arbitrary script may

Status

Published

2024-03-18

Updated

2025-03-27

Assigning organization

jpcert

Description

Stored cross-site scripting vulnerability exists in CGIs included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

A.K.I Software pmc.exe

2.5.1.720 and earlier affected

A.K.I Software pmam.exe

2.5.1.1411 and earlier affected

A.K.I Software pmum.exe (Standard edition)

2.5.1.25451 and earlier affected

A.K.I Software pmum.exe (Pro edition)

2.5.1.25452 and earlier affected

A.K.I Software pmum.exe (Standard + IMAP4 edition)

2.5.1.25453 and earlier affected

A.K.I Software pmum.exe (Pro + IMAP4 edition / Enterprise edition)

2.5.1.25454 and earlier affected