CVE-2006-0842

CVE-2006-0842 concerns Calacode @Mail 4.3 and is a cross-site scripting (XSS) vulnerability where an attacker can inject arbitrary script/HTML via a modified javascript: string in the SRC attribute of an IMG element in an email message, as demonstrated by the payload “java script:.” This originat...