CVE-2005-0846: XSS
Multiple cross-site scripting (XSS) vulnerabilities in the email auto-reply message in SurgeMail 2.2g3 allow remote attackers to inject arbitrary web script or HTML via the (1) message subject or (2) message header field.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-0846?
CVE-2005-0846 is considered a moderate severity vulnerability due to its potential for exploitation through cross-site scripting.
How do I fix CVE-2005-0846?
To fix CVE-2005-0846, upgrade SurgeMail to a version later than 2.2g3 that addresses these cross-site scripting vulnerabilities.
What are the implications of exploiting CVE-2005-0846?
Exploiting CVE-2005-0846 allows attackers to inject arbitrary web scripts or HTML into email auto-reply messages, potentially compromising user data.
Which software versions are affected by CVE-2005-0846?
CVE-2005-0846 affects SurgeMail version 2.2g3.
Can I mitigate CVE-2005-0846 without upgrading?
Mitigation options for CVE-2005-0846 are limited, so upgrading to a secure version is the recommended approach.