4.3

CVE-2006-3564

Multiple cross-site scripting (XSS) vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the email, (2) cond, or (3) name parameters to (a) addressbook.view.php, (4) the daysprune parameter to (b) index.php, (5) the data[to] parameter to (c) compose.email.php, and (6) the markas parameter to (d) read.markas.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hivemail ≫ Hivemail Version1.2
Hivemail ≫ Hivemail Version1.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.69% 0.741
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://pridels0.blogspot.com/2006/07/hivemail-vuln.html
http://secunia.com/advisories/20993
Vendor Advisory
http://securitytracker.com/id?1016531
http://www.osvdb.org/27100
http://www.osvdb.org/27101
http://www.osvdb.org/27102
http://www.osvdb.org/27103
http://www.securityfocus.com/bid/18949
http://www.vupen.com/english/advisories/2006/2763
https://exchange.xforce.ibmcloud.com/vulnerabilities/27695