4.3
CVE-2006-3229
- EPSS 1.18%
- Veröffentlicht 27.06.2006 01:05:00
- Zuletzt bearbeitet 16.06.2026 22:26:39
- Erkennungen
LoginCross-site scripting (XSS) vulnerability in Open WebMail (OWM) 2.52, and other versions released before 05/12/2006, allows remote attackers to inject arbitrary web script or HTML via the (1) To and (2) From fields in openwebmail-main.pl, and possibly (3) other unspecified vectors related to "openwebmailerror calls that need to display HTML."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Open Webmail ≫ Open Webmail Version <= 2.52
Open Webmail ≫ Open Webmail Version 1.7
Open Webmail ≫ Open Webmail Version 1.8
Open Webmail ≫ Open Webmail Version 1.71
Open Webmail ≫ Open Webmail Version 1.81
Open Webmail ≫ Open Webmail Version 1.90
Open Webmail ≫ Open Webmail Version 2.5
Open Webmail ≫ Open Webmail Version 2.20
Open Webmail ≫ Open Webmail Version 2.21
Open Webmail ≫ Open Webmail Version 2.30
Open Webmail ≫ Open Webmail Version 2.31
Open Webmail ≫ Open Webmail Version 2.32
Open Webmail ≫ Open Webmail Version 2.41
Open Webmail ≫ Open Webmail Version 2.51
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.18% | 0.645 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://openwebmail.acatysmoof.com/dev/svn/index.pl/openwebmail/diff/trunk/src/cgi-bin/openwebmail/openwebmail-main.pl?rev1=235%3Brev2=236
http://openwebmail.org/openwebmail/doc/changes.txt
http://secunia.com/advisories/20714
http://www.attrition.org/pipermail/vim/2006-June/000902.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/27309