2 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Kerio MailServer before 6.6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 folder parameter to mailCompose.php or the 2 daytime parameter to calendarEdit.php. NOTE: some of these details are obtained from third party...
4.3CVSS5.9AI score0.01223EPSS
SaveExploits0References6Affected Software1
CVE-2008-5769: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Kerio MailServer before 6.6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 folder parameter to mailCompose.php or the 2 daytime parameter to calendarEdit.php. NOTE: some of these details are obtained from third party...
4.3CVSS5.8AI score0.01223EPSS
SaveExploits0References2
20