CVE-2006-0758

CVE-2006-0758 involves multiple XSS vulnerabilities in HiveMail 1.3 and earlier. The issue arises from URL encoded expressions in the query string (in index.php and potentially other scripts) not being properly cleansed when accessed via $_SERVER['PHP_SELF'], allowing remote attackers to inject a...