First published: Tue Jun 27 2006(Updated: )
Cross-site scripting (XSS) vulnerability in openwebmail-read.pl in Open WebMail (OWM) 2.52, and other versions released before 06/18/2006, allows remote attackers to inject arbitrary web script or HTML via the from field. NOTE: some third party sources have mentioned the "to" and "from" fields, although CVE analysis shows that these are associated with the previous version, a different executable, and a different CVE.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Open Webmail Open Webmail | =1.7 | |
Open Webmail Open Webmail | =2.41 | |
Open Webmail Open Webmail | =1.81 | |
Open Webmail Open Webmail | =2.30 | |
Open Webmail Open Webmail | =2.21 | |
Open Webmail Open Webmail | =2.51 | |
Open Webmail Open Webmail | =1.71 | |
Open Webmail Open Webmail | =2.31 | |
Open Webmail Open Webmail | =2.5 | |
Open Webmail Open Webmail | =2.20 | |
Open Webmail Open Webmail | =1.8 | |
Open Webmail Open Webmail | =1.90 | |
Open Webmail Open Webmail | =2.32 | |
Open Webmail Open Webmail | <=2.52 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.