CVE-2007-0953: XSS
Cross-site scripting (XSS) vulnerability in search.pl in @Mail 4.61 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0953?
CVE-2007-0953 is classified as a high severity cross-site scripting vulnerability that can potentially allow attackers to inject malicious scripts.
How do I fix CVE-2007-0953?
To fix CVE-2007-0953, users should upgrade to a version of @Mail that is 4.62 or later, where the vulnerability has been patched.
What are the affected versions related to CVE-2007-0953?
CVE-2007-0953 affects @Mail versions 4.61 and earlier, including 4.3, 4.6, 4.11, and 4.51.
Who can exploit CVE-2007-0953?
Remote attackers can exploit CVE-2007-0953 by injecting arbitrary web scripts or HTML through the keywords parameter of search.pl.
What types of attacks can result from CVE-2007-0953?
Exploitation of CVE-2007-0953 can lead to cross-site scripting (XSS) attacks, which can compromise user sessions and information.