Cross site scripting

2011-10-0910:55:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.2%

JSON

Cross-site scripting (XSS) vulnerability in index.php in @mail Webmail before 6.2.0 allows remote attackers to inject arbitrary web script or HTML via the MailType parameter in a mail/auth/processlogin action.

CPENameOperatorVersion
webmaileq6.1.5
webmaileq6.1.6
webmaileq6.1.7
webmaille6.1.9
webmaileq6.1.8
webmaileq6.1.2
webmaileq6.1.4
webmaileq6.1.3

Name	Operator	Version
webmail	eq	6.1.5
webmail	eq	6.1.6
webmail	eq	6.1.7
webmail	le	6.1.9
webmail	eq	6.1.8
webmail	eq	6.1.2
webmail	eq	6.1.4
webmail	eq	6.1.3

References

osvdb.org/68183

secunia.com/advisories/41555

securityreason.com/securityalert/8455

www.securityfocus.com/archive/1/513890/100/0/threaded

www.securityfocus.com/bid/43377

exchange.xforce.ibmcloud.com/vulnerabilities/61958