CVE-2006-3108

Cross-site scripting XSS vulnerability in EmailArchitect Email Server 6.1 allows remote attackers to inject arbitrary Javascript via an HTML div tag with a carriage return between the onmouseover attribute and its value, which bypasses the mail filter...

CVE-2006-3108

EmailArchitect Email Server 6.1 is affected by an XSS vulnerability. An attacker can inject arbitrary JavaScript by exploiting a malformed HTML div tag where a carriage return sits between the onmouseover attribute and its value, bypassing the mail filter. This is described in multiple sources (N...