CVE-2006-2104: XSS
Multiple cross-site scripting (XSS) vulnerabilities in Kamgaing Email System (kmail) 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) d parameter to main.php, ordner parameter to (2) main.php, or (3) webdisk.php, (4) draft parameter to compose.php, or (5) m, or (6) y parameter to calendar.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-2104?
CVE-2006-2104 is classified as a medium severity vulnerability due to the potential exploitation of cross-site scripting.
How do I fix CVE-2006-2104?
To fix CVE-2006-2104, upgrade to KMail version 2.4 or later, which addresses these vulnerabilities.
What can attackers do with CVE-2006-2104?
Attackers can exploit CVE-2006-2104 to inject arbitrary web scripts or HTML into web pages viewed by users.
Which versions of KMail are affected by CVE-2006-2104?
KMail versions 2.3 and earlier, including 1.7.1, are affected by CVE-2006-2104.
What are the specific parameters involved in CVE-2006-2104?
The specific parameters involved in CVE-2006-2104 include d, ordner, draft, m, and others on main.php and webdisk.php.