CVE-2005-0323

CVE-2005-0323 affects Infinite Mobile Delivery Webmail 2.6. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the URL, enabling potential credential theft or session manipulation. The issue is documented in multiple sour...

PT-2005-1402 · Microsoft +1 · Windows +1

Name of the Vulnerable Software and Affected Versions: Infinite Mobile Delivery Webmail version 2.6 Description: The issue allows remote attackers to gain sensitive information via an HTTP request containing invalid characters for a Windows folder name, which reveals the path in an error message...