CVE-2005-2769: XSS

Published Sep 2, 2005

Updated

Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 and possibly other versions allows remote attackers to inject arbitrary web script or HTML via an HTML e-mail containing tags with strings that contain ">" or other special characters, which is not properly sanitized by SqWebMail.

Affected Software

1 affected component

Inter7 SqWebMail=5.0.4

Remediation

Patch Available

http://secunia.com/advisories/16600/

Event History

Sep 2, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-2769?

CVE-2005-2769 is considered a high-severity vulnerability due to its potential for exploitation through cross-site scripting (XSS).

How do I fix CVE-2005-2769?

To fix CVE-2005-2769, upgrade to the latest version of SqWebMail that has addressed this vulnerability.

What versions of SqWebMail are affected by CVE-2005-2769?

CVE-2005-2769 affects SqWebMail version 5.0.4 and possibly earlier versions.

What type of attack does CVE-2005-2769 enable?

CVE-2005-2769 enables remote attackers to perform cross-site scripting (XSS) attacks.

Can I test for CVE-2005-2769 in my SqWebMail installation?

Yes, you can test for CVE-2005-2769 by sending an HTML email with unsanitized special characters to check for script execution.