CVE-2005-2820: XSS

Published Sep 7, 2005

Updated

Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or HTML via an e-mail message containing Internet Explorer "Conditional Comments" such as "[if]" and "[endif]".

Affected Software

1 affected component

Inter7 SqWebMail=5.0.4

Remediation

Patch Available

http://secunia.com/secunia_research/2005-44/advisory/

Event History

Sep 7, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-2820?

CVE-2005-2820 is considered a moderate severity vulnerability due to its potential for cross-site scripting attacks.

How do I fix CVE-2005-2820?

To fix CVE-2005-2820, update SqWebMail to a version that addresses this vulnerability.

What are the potential impacts of CVE-2005-2820?

The potential impacts of CVE-2005-2820 include unauthorized script execution in the context of the user's browser.

Who is affected by CVE-2005-2820?

Users of SqWebMail version 5.0.4 are affected by CVE-2005-2820.

How does CVE-2005-2820 work?

CVE-2005-2820 allows attackers to inject arbitrary web scripts through specially crafted e-mail messages using Internet Explorer Conditional Comments.