CVE-2006-0091: XSS
Cross-site scripting (XSS) vulnerability in webmail in Open-Xchange 0.8.1-6 and earlier, with "Inline HTML" enabled, allows remote attackers to inject arbitrary web script or HTML via e-mail attachments, which are rendered inline.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-0091?
CVE-2006-0091 is considered a medium severity vulnerability due to its potential for exploiting cross-site scripting in webmail.
How do I fix CVE-2006-0091?
To fix CVE-2006-0091, upgrade Open-Xchange to a version later than 0.8.1-6 where the vulnerability is addressed.
Who is affected by CVE-2006-0091?
CVE-2006-0091 affects users of Open-Xchange versions 0.8.1-6 and earlier with Inline HTML enabled.
What type of vulnerability is CVE-2006-0091?
CVE-2006-0091 is a cross-site scripting (XSS) vulnerability allowing the injection of arbitrary web scripts through email attachments.
Can CVE-2006-0091 be exploited remotely?
Yes, CVE-2006-0091 can be exploited remotely by attackers who send malicous email attachments.