CVE-2011-4540: XSS
Multiple cross-site scripting (XSS) vulnerabilities in AtMail Open (aka AtMail Open-Source edition) 1.04 allow remote attackers to inject arbitrary web script or HTML via the func parameter to (1) ldap.php or (2) search.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4540?
The severity of CVE-2011-4540 is classified as moderate due to its potential for cross-site scripting attacks.
How do I fix CVE-2011-4540?
To fix CVE-2011-4540, sanitize and validate all user input, especially the func parameter in ldap.php and search.php.
What are the impacts of CVE-2011-4540?
The impacts of CVE-2011-4540 include the ability for remote attackers to execute arbitrary web scripts or HTML in the context of users visiting the affected webpages.
Who is affected by CVE-2011-4540?
CVE-2011-4540 affects users of AtMail Open version 1.04, specifically those utilizing the ldap.php and search.php scripts.
What are remediation steps for CVE-2011-4540?
Remediation steps for CVE-2011-4540 include upgrading to a patched version of AtMail Open and implementing input validation mechanisms.