CVE-2006-6702: XSS
Cross-site scripting (XSS) vulnerability in Global.pm in @Mail before 4.61 allows remote attackers to inject arbitrary web script or HTML via crafted e-mail messages. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-6702?
CVE-2006-6702 is classified as a medium severity vulnerability due to its potential for exploitation via cross-site scripting.
How do I fix CVE-2006-6702?
To fix CVE-2006-6702, upgrade to a version of Atmail Webmail that is no longer vulnerable, such as version 4.61 or later.
What are the affected versions for CVE-2006-6702?
Affected versions for CVE-2006-6702 include Atmail Webmail versions prior to 4.61, specifically 4.4, 4.3, 4.51, 4.1, 4.11, 4.5, and 4.2.
What type of vulnerability is CVE-2006-6702?
CVE-2006-6702 is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject malicious scripts via crafted email messages.
Who discovered CVE-2006-6702?
The information regarding CVE-2006-6702 is obtained from third-party sources, and the original discovery details are unknown.