CVE-2006-3095 Multiple cross-site scripting (XSS) vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the RETURNURL parameter in (1) userlogin.cfm and (...
MediumCVSS 4.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the RETURNURL parameter in (1) userlogin.cfm and (2) account.cfm.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ipostmx 2005 | <= 2.0 | No fix listed |
References
- pridels0.blogspot.com
- 20697 third-party-advisory vendor-advisory
- 26522 vdb-entry
- 26523 vdb-entry
- 18460 vdb-entry
- ADV-2006-2382 vdb-entry
- ipostmx-returnurl-xss(27140) vdb-entry