First published: Tue Jun 27 2006(Updated: )
Cross-site scripting (XSS) vulnerability in Open WebMail (OWM) 2.52, and other versions released before 05/12/2006, allows remote attackers to inject arbitrary web script or HTML via the (1) To and (2) From fields in openwebmail-main.pl, and possibly (3) other unspecified vectors related to "openwebmailerror calls that need to display HTML."
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Open Webmail Open Webmail | <=2.52 | |
Open Webmail Open Webmail | =1.7 | |
Open Webmail Open Webmail | =1.8 | |
Open Webmail Open Webmail | =1.71 | |
Open Webmail Open Webmail | =1.81 | |
Open Webmail Open Webmail | =1.90 | |
Open Webmail Open Webmail | =2.5 | |
Open Webmail Open Webmail | =2.20 | |
Open Webmail Open Webmail | =2.21 | |
Open Webmail Open Webmail | =2.30 | |
Open Webmail Open Webmail | =2.31 | |
Open Webmail Open Webmail | =2.32 | |
Open Webmail Open Webmail | =2.41 | |
Open Webmail Open Webmail | =2.51 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.