CVE-2006-2104

The CVE covers multiple reflected cross-site scripting (XSS) flaws in Kamgaing Email System (kmail) version 2.3 and earlier. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML by manipulating specific parameters: d and (1) main.php, ordner and (2) main.php, (3) webd...