Multiple cross-site scripting vulnerabilities in MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter to login.html, (2) accountid parameter to accountsettings_add.html, or the (3) note, (4) title, and (5) location fields to calendar.html.
References
Configurations
History
20 Nov 2024, 23:54
Type | Values Removed | Values Added |
---|---|---|
References | () http://marc.info/?l=bugtraq&m=110693950205007&w=2 - | |
References | () http://www.securityfocus.com/bid/12396 - Patch, Vendor Advisory | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/19147 - |
Information
Published : 2005-01-28 05:00
Updated : 2024-11-20 23:54
NVD link : CVE-2005-0320
Mitre link : CVE-2005-0320
CVE.ORG link : CVE-2005-0320
JSON object : View
Products Affected
icewarp
- web_mail
CWE