CVE-2005-0320: Medium severity IceWarp Web Mail vulnerability
Multiple cross-site scripting vulnerabilities in MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter to login.html, (2) accountid parameter to accountsettingsadd.html, or the (3) note, (4) title, and (5) location fields to calendar.html.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What are the main vulnerabilities identified in CVE-2005-0320?
CVE-2005-0320 identifies multiple cross-site scripting vulnerabilities in MERAK Mail Server 7.6.0 that allow attackers to inject arbitrary web scripts via specific parameters.
Who is affected by CVE-2005-0320?
CVE-2005-0320 affects users of the MERAK Mail Server version 7.6.0 along with the IceWarp Web Mail version 5.3.0.
How can the vulnerabilities in CVE-2005-0320 be mitigated?
To mitigate the vulnerabilities in CVE-2005-0320, users should ensure that their systems are updated to the latest patched versions that address these security issues.
What types of parameters are involved in the exploitation of CVE-2005-0320?
The parameters involved in the exploitation of CVE-2005-0320 include username in login.html, accountid in accountsettings_add.html, and fields such as note and title.
What is the potential impact of exploiting CVE-2005-0320?
Exploiting CVE-2005-0320 could lead to unauthorized access to user data and web sessions due to the execution of injected scripts.