CVE-2005-2595

CVE-2005-2595 is a cross-site scripting (XSS) vulnerability in Dada Mail (Perl) prior to 2.10 Alpha 1. An attacker could inject arbitrary JavaScript into archived messages, which would then execute in a user’s browser when viewed. The root cause is improper validation of user-submitted content be...