CVE-2004-0337: SOFTWARE602 602pro Lan Suite

Medium severity, CVSS 6.8. EPSS: 2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in LAN SUITE Web Mail 602Pro allows remote attackers to execute arbitrary script or HTML as other users via a URL to index.html, followed by a / (slash) and the desired script. NOTE: the vendor states that this bug could not be reproduced, so this issue may be REJECTed in the future.

Affected products

• SOFTWARE602 602pro Lan Suite: version 2002 only; version 2003 only

Published 2004-11-23. Last modified 2026-06-16.