Cross site scripting

2008-12-3019:30:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.0%

JSON

Cross-site scripting (XSS) vulnerability in error413.php in Kerio MailServer before 6.6.2 allows remote attackers to inject arbitrary web script or HTML via the sent parameter. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
kerio_mailservereq6.5.1
kerio_mailservereq5.6.5
kerio_mailservereq6.3.1
kerio_mailservereq6.0.9
kerio_mailservereq6.2.1
kerio_mailservereq6.0.7
kerio_mailserverle6.6.1
kerio_mailservereq5.7.0
kerio_mailservereq6.1.4
kerio_mailservereq5.1.1

Name	Operator	Version
kerio_mailserver	eq	6.5.1
kerio_mailserver	eq	5.6.5
kerio_mailserver	eq	6.3.1
kerio_mailserver	eq	6.0.9
kerio_mailserver	eq	6.2.1
kerio_mailserver	eq	6.0.7
kerio_mailserver	le	6.6.1
kerio_mailserver	eq	5.7.0
kerio_mailserver	eq	6.1.4
kerio_mailserver	eq	5.1.1